RFID tags set for takeoff in the airline industry. 


Sybase’s CEO: H-1B program benefits the U.S. 
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Customers say that 
ai business-process 
management software 
can pay for itself in a year or two 
by making better use of under- 
performing ERP systems. Page 27 
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PeopleSoft Offers Refunds 


In Event of Oracle Takeover 


Apps vendor seeks to keep customers from 
| delaying purchases following rival's hostile bid 





BY MARC L. SONGINI 
PeopleSoft Inc. has begun pro- 
mising to pay refunds to some 
new or upgrading customers if 
it’s acquired and the products 


| they purchased are discontin- 


ued, sources said last week. 
And on June 9, the same day 
that Oracle Corp. launched its 


| hostile bid to buy it, People- 
| Soft sent a letter to a potential 


customer that included a con- 


| tractual offer to pay the user 
twice the cost of its software 





IDS Criticisms Kindle Debate 


Intrusion detection is 


| more trouble than it’s 
worth, Gartner says 


| BY JAIKUMAR VIJAYAN 

| A Gartner Inc. report that 
called intrusion-detection sys- 
| tems a failed technology that 


isn’t cost-effective evoked fer- 


| vent reactions last week from 


users, vendors and analysts on 


| both sides of the argument. 


Some concurred with Gart- 
ner’s position, saying IDSs are 
difficult to manage and gener- 
ate far more data than is useful. 

“I couldn’t agree more,” said 
Eric Beasley, network adminis- 
trator at Baker Hill Corp., an 


| application service provider in 
| Carmel, Ind., that replaced its 


IDS with a Web application 
firewall. “IDS did little to in- 
crease our overall security,” he 
said. “All I got was information 
overload.” 

Others said that despite the 
problems, it’s premature to 





| completely write off IDS tech- 
| nology. 


“T think that broadly de- 


| scribing IDS as a market fail- 


ure because of product short- 


| comings is a bit alarmist,” said 


Eric Goldreich, manager of 
technology at Latham & Wat- 
kins LLP, a law firm with 1,500 


IDS, page 61 


licenses. According to the let- 


| ter, which was obtained by 
| Computerworld, the payment 


KEY DEVELOPMENTS | 


| year and if within two years 
| the new owner drops the pur- 


would be triggered should 
PeopleSoft be bought within a 


chased applications or sets 


| plans to stop supporting them. 


The refund strategy is seen 


| as an attempt by Pleasanton, 

| Calif.-based PeopleSoft to keep 
| concerned users from delaying 
| software purchases because of 
| Oracle’s hostile bid. It could 

| also serve as a “poison pill 


takeover deterrent. 
The takeover battle intensi- 


| fied last week, as Oracle 

| upped its offer to $6.3 billion, 
| and PeopleSoft and J.D. Ed- 

| wards & Co. amended their 

| merger agreement in an effort 
| to speed up that deal. 


The identity of the user that 
received the June 9 letter was 


| shielded from Computerworld. 


PeopleSoft declined to com- 


| ment about the letter and said 
| it doesn’t publicly discuss cus- 
attorneys in Los Angeles. “The | 


tomer contracts. But a spokes- 
PeopleSoft, page 16 


N/MCI Security Doubts Persist 


Users, Navy officials 
and EDS's partners 


BY DAN VERTON 
NEW ORLEANS 


Tut | 
SETAE ore secure 


network infrastructure was 
one of the driving forces be- 
hind the U.S. Navy’s quest to 
build the $6.9 billion Navy/ 
Marine Corps Intranet. But 


| with only a few months left 
| 


before the majority of N/MCI 


| seats are deployed, questions 


| stillraisingconcerns | 


| remain. 


and concerns about security 


During the Navy/Marine 
Corps Intranet Industry Sym- 
posium here last week, offi- 


| cials from both the Navy and 


its prime contractor, Electron- 
ic Data Systems Corp., touted 
N/MCI as “the most secure 
network in the Department of 
N/MCI, page 61 
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We've been listening to what you, our customers, have to say about the way the software industry 
does business. And frankly, some of it couldn’t be repeated in print. You’ve been frustrated 
by long-term agreements. You’ve been disenchanted by the lack of options when it comes to 
software licensing. And, most of all, you’ve been annoyed that no one’s been listening to any 


of your complaints. 


Well, we want you to know that we hear you, and we’ve been doing everything we can to change 
the way we do business with you. Recently, we’ve revolutionized the industry by being the first 
to introduce flexible licensing contracts. With FlexSelect Licensing”, you can now get software 
on your terms, not ours. We offer short-term or long-term licensing agreements, so you can 
choose your commitment based on your needs. Of course, if you prefer more traditional long- 
term licensing, it’s still available. And we offer payment plans that fit the way you work, not 


the other way around. 


Flexible software licensing is about choice. 
It's about control. 
It's about time. 


We've heard back from many of our customers and they’re thrilled with the changes. From global 
Fortune 500° companies to smaller organizations, the response has been overwhelmingly 
positive. Some of the comments we've received include “flexible licensing is a tremendous tool,” 
“a huge win for CA customers” and “clearly demonstrates that CA is an extremely innovative, 


flexible and customer-focused company.” 


But the changes don’t stop with flexible licensing. That’s just one part of our renewed focus 
on you, our customers. We've also increased our responsiveness to your needs. And we've even 
increased our focus on internal research and development, furthering our commitment to 


creating the most innovative business software solutions in the market. 


Innovations in licensing, increased customer responsiveness and product development are just 
a few more ways we're staying well ahead of the rest of the pack in the software industry. Contact 
us at ca.com/flexselect today to find out more. We think you'll be pleased with what you see. 


If not, let us know. And we'll do something about it. 


FlexSelect Licensing” Computer Associates® 


© 2003 Computer Associates International, Inc. (CA). All trademarks, trade names, service marks, and logos referenced herein belong to 
their respective companies. 
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software helps deliver better customer service at 
lower costs, but it requires staff buy-in and the sup- 
port of clear policies and procedures. Page 36 
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HP’s adaptive management 
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Delta Air Lines plans to test 
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about the IBM/SCO legal 
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Microsoft upgrades its Pocket 
PC mobile operating system. 


Sen. Orrin Hatch’s “extreme” 
remedy for piracy draws fire. 


CA enhances its eTrust anti- 
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downloads. 


Microsoft entices users to 
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Outsourcers: Do They Mea- 
sure Up? Companies are 
using benchmarking or base- 
lining tests to make sure 
they’re not paying too much 
to outside contractors. 


8 


On the Mark: Mark Hall re- 
veals that even Eclipse’s sup- 
porters see its limits, and he 
lists four women headed for 
the WITI Hall of Fame. 


24 Patricia Keefe says vendors’ 


competitive maneuvers are 
making it harder for users to 
buy anything. And it will be 
the vendors’ fault if the mar- 
ket continues to sputter. 


24 Pimm Fox puts SSL on par 


with IPsec for securing in- 
tranet and Internet access. 


25 Michael Gartenberg says 


there’s plenty of room and 
need for Linux, despite the at- 
tacks SCO and Microsoft have 
launched on the open-source 
operating system. 


40 Tommy Peterson suggests it’s 


time to take the flood of un- 
structured data seriously. 


54 Paul Glen offers four rules for 


using “microdeliverables” to 
keep IT projects on schedule. 


62 Frankly Speaking: Frank 


Hayes reminds readers that 
bad ideas from lawmakers 
keep coming around, as Sen 
Orrin Hatch suggests destroy- 
ing the computers of users 
suspected of illegally down- 
loading files. 





DEPARTMENTS/RESOURCES 
At Deadline Briefs 

News Briefs ................. : 
Letters 

Company Index ................: 
How to Contact CW 

Shark Tank 


ONLINE 


WWW.COMPUTERWORLD.COM 


Safeguarding Your Networks 
SECURITY: Paul V. Mockapetris, inventor of 
the Domain Name System and chief scientist 
at Nominum, gives advice on ways to ensure 
that your networks are secure and reliable. 


@ QuickLink 38707 


Does Privacy Pay? 

MANAGEMENT: Yes, investments in privacy 
can pay off in the long run for companies in 
privacy-sensitive markets, writes columnist 
Jay Cline. He also provides a chart for figur- 
ing out if you engage in privacy-sensitive 
commerce. @ QuickLink 39236 


Server Consolidation 

OPERATING SYSTEMS: Avanade’s Christopher 
Burry offers tips on when it makes sense to 
merge hardware — and when it doesn’t. @ 
QuickLink 39272 


Avoid Hidden Costs When 
Building Web-Based Apps 
DEVELOPMENT: We all want to jump in and 
start coding, but you need to slow down and 
properly execute a discovery phase to ensure 
a successful development project, says 
columnist Seth Miller. @ QuickLink 39195 


bo Makes a Good 

SOFTWARE: Charles Born of Amdocs’ Clarify- 
CRM division outlines what to look for if 
you're in the market for CRM software. 


@ QuickLink 39070 


ONLINE 
DEPARTMENTS 


Breaking News 
© QuickLink a1510 


Newsletter Subscriptions 
© QuickLink 21430 
Knowledge Centers 

© QuickLink a2570 
The Online Store 

© QuickLink 22420 


What's a QuickLink? 
On some pages in 
this issue, you'll see 

a Quicid ink code point 

to additional, related con- 

tent on our Web site. Just 
enter that code into our 
you'll see at the top of 
each page on our site. 





6 COMPUTERWORLD June 23, 2003 


AT DEADLINE 


Key3Media Emerges 
From Chapter 11 


Key3Media Group Inc. in Los 
Angeles, producer of the Comdex 
and NetWorld+Interop trade 
shows, last week said it has 
emerged from Chapter 11 bank- 
ruptcy as a private company. The 
new company, to be called Media- 
Live International Inc., will relo- 
cate this summer to San Francis- 
co. The company said it reduced 
its debt by 87% and related an- 
nual interest expenses by 91%. 


New Trojan Horse 
Program Confirmed 


Rumors of a new type of Trojan 
horse program were confirmed 
last week. The program, known 
variously as “Trojan 55808” and 
“Stumbler,” targets computers 
running Linux and must be in- 
stalled manuaily. Once installed, 
the Trojan horse runs quietly in 
the background and acts as a 
distributed port scanner, ran- 
domly searching the Internet for 
machines with valid IP addresses 
and open ports. 


IBM Feeds Shark 


IBM said Friday that its flagship 
Enterprise Storage Server Model 
800 now features peer-to-peer 
remote copy through asynchro- 
nous replication, extending the 
copy capabilities of IBM’s eServer 
zSeries and open systems. IBM 
also added up to 6.9TB of stand- 
by capacity on demand to the 
server, code-named Shark. 


Computerworld 
Wins Press Awards 


Computerworld garnered nine 
national business press awards, 
including four first-place gold 
honors, at an American Society 
of Business Publication Editors 
ceremony in Washington last 
week. The awards, which recog- 
nize excellence in business jour- 
nalism, followed regional honors 
presented earlier this month. 
Details are available on our Web 
site [QuickLink 39367]. 





NEWS 


Adaptive Management’ 
Promising, but Years Off 


Users applaud HP rollout but doubt that 
vision will become reality any time soon 





BY MATT HAMBLEN 
CHICAGO 
EWLETT-PACKARD 
Co. last week took a 
step toward making 
its “adaptive enter- 
prise management” vision a re- 
ality. But users were left with 
little doubt that it will take 
years for the strategy to fulfill 
its promise of reducing IT 
complexity and costs. 

At the HP Software Forum 
here, the company beat the 
adaptive management drum as 
it unveiled more than 30 prod- 
ucts and upgrades in its Open- 
View systems management 
software line. It made assur- 
ances that the products will 
bring IT shops closer to an in- 
frastructure that can change 
with business needs and even 
heal itself. 

Attendees liked the mes- 
sage, but they’re not holding 
their breaths. 





“It’s obvious that we’re go- 
ing to get clear [systems] 
event management, but it’s not 
happening today,” said Steven 
Yee, director of channel devel- 
opment at Voyence Inc., an 
OpenView integrator in Rich- 
ardson, Texas. “There is still 
no silver bullet.” 

Many of the product releas- 
es, such as OpenView Net- 
work Node Manager (NNM) 
7.0, were demonstrated at the 
event, but they won’t start 
shipping until Sept. 30. 

NNM users were itching to 
try out newly announced fea- 
tures, such as the ability to 


| manage more objects on a net- 


work and then filter out mean- 


| ingless alarms. That would 


give network managers a more 

accurate assessment of the 

cause of a network outage. 
“That sounds good to me 

to have fewer alarms, with 

the real cause of an outage 


User Bets on Adaptive Management 


HP's adaptive enterprise 
management is still just a vi- 
sion, but Georgia-Pacific Corp. 
(GP) is counting on that vision 
to materialize as it pursues a 
project to bring its data center 
management back in-house. 

Starting in September, the 
Atlanta-based paper and chem- 
icals manufacturer will begin 
managing two data centers af- 
ter six years of outsourced man- 
agement by IBM. The move is 
being made primarily to lower 
costs, said Sudip Gangopad- 
hyay, manager of Unix technical 
services at GP. 

With $23 billion in revenue 
in 2002 and more than 60,000 
empioyees, GP will be manag- 
ing a consolidated IT operation 
with 2,300 Windows servers 
and 140 Unix servers. 


Conceptually, GP could mar- 
shal many servers and related 
systems to handle a new busi- 
ness demand and then be able 
to switch again quickly, Gan- 
gopadhyay said. The project has 
been in the planning stage for 
three years and relies heavily on 
HP's OpenView Operations soft- 
ware, as well as Network Node 
Manager and other products. 

“With the adaptive technol- 
ogy and utility models of HP, 
there's a tremendous amount of 
value to using the computing 
resources as we need them,” 
Gangopadhyay said. “Adaptive 
management is more of a con- 
cept [than a reality} at this 
point, but if we can reach up to 
60% to 70% of the full con- 
cept, that's a win.” 

~ Matt Hamblen 





shown,” said G. Simon Jin, net- 
work architect at The Cleve- 
land Clinic Foundation. Jin 
said he has used NNM at oth- 
er companies and is consider- 


| ing it for the health center. 


Nora Denzel, senior vice 
president and general manag- 
er of HP’s Global Software 
business unit, said in her 
keynote speech that adaptive 
management will provide the 
ability to “automate IT infra- 
structure to adapt to any busi- 
ness decision.” Adaptable and 
self-healing networks will 
eventually free IT workers 
from maintenance and let 
them take on higher-level 
strategist and developer roles 
instead, she said. 


Making a Business Case 
Some users said that vision, 
though distant, is alluring. But 
hurdles remain. 

Itai Argoetti, a systems man- 
ager at Orbotech Ltd., a maker 
of testing equipment in Yavne, 
Israel, said adaptive manage- 
ment is an “interesting and 
good concept,” but he’s unsure 
that IT managers will be able 
to explain the software to their 
business-side bosses. 

“With the current economic 
situation, management wants 
to make IT ... shrink,” Argoet- 
ti said. “If you could convince 
them this software will really 
lower costs, I believe they 
would go for it. But you have 
to convince them first.” 

Tim Hagn, vice president 
of IT operations and engineer- 
ing at Zurich Life Insurance 


| Co. in Schaumburg, IIl., has al- 


ready gotten value from Open- 
View in predicting and pre- 
venting network downtime 
and would welcome an adap- 
tive capability. 

“In the past, when a user 
couldn’t [work] because of net- 
work or systems problems, all I 
could do was say ‘I’m sorry.’ 
But this gives us the potential 
to predict problems and pre- 
vent saying ‘I’m sorry,” Hagn 
said. “That’s huge to me.” 
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HP OpenView 


s BENEFITS 
799 / reduction in 


/O server downtime 


7, ANY / reduction in 

d /O overall downtime 
QOO/ Feduction in time 

4! ) JO needed to identify 

cause of downtime and fix it 


5 ] O/ increase in user 
J17/0 productivity because 
of reduced downtime 


B RETURNS (per 10 


IT productivity $19,223 


Cost reduction $36,172 
User productivity $93,712 


Lost revenue avoided $74,468 


BASE: 14 companies that have used 
OpenView for at least three years 


SOURCE. IDC, FRAMINGHAM, MASS 


Analysts agreed that the 
ultimate promise of adaptive 
management is still years 
away. 

“CHP has] shown us a high- 
level view of a [yet-to-be] fully 
implemented strategy for 
leveraging IT resources ina 
virtualized business environ- 
ment,” said Tim Grieser, an 
analyst at IDC in Framingham, 
Mass. But Grieser noted that 
HP has already signed dozens 
of large customers for its Utili- 
ty Data Center product, which 
he called the closest thing to a 
fully implemented adaptive 
management system. 

“Obviously we aren’t there, 
but we’re closer. And this 
[adaptive management ability] 
is more achievable than you 
think,” said Laura Koetzle, an 
analyst at Forrester Research 
Inc. in Cambridge, Mass. Still, 
Koetzle predicted that it will 
be 10 to 15 years before such 
software is able to satisfy busi- 
ness and IT managers alike. B 
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NEWS 


Delta to Test RFID Tags on Luggage 


Radio-frequency trial follows Wal-Mart's | 


embrace of technology in retail industry 





BY BOB BREWIN 
Delta Air Lines Inc. last week | 
said it plans to test the use of | 
radio-frequency identification | 
(RFID) tags on pas- 

senger luggage in 

the fall, making it 

the second major 

company to give 

the emerging technology a 
boost this month. 

Delta will give RFID devices 
a trial run on selected flights 
from Jacksonville, Fla., to its 
headquarters hub in Atlanta. It 
said the 30-day test will involve 
the use of more than 40,000 
disposable RFID tags that op- 
erate at 900 MHz and are being 
made by two vendors: Matrics 
Inc. in Columbia, Md., and SCS 
Corp. in San Diego. 

Delta’s announcement came 
just one week after Wal-Mart 
Stores Inc. said it plans to re- 
quire its top 100 suppliers to 
use RFID tags on shipping pal- 
lets by January 2005 [Quick- 
Link 39181]. Wal-Mart’s stamp 
of approval is expected to spur 
broader adoption of RFID 
technology in the retail indus- 
try, and analysts said Delta’s 
move could have a similar ef- 
fect on other airlines. 

RFID has to wait for “some 
killer apps” to become a reali- 
ty before it can be widely 
used, said Deepak Shetty, an 
analyst at Frost & Sullivan Inc. 
in San Jose. Delta’s test and 
Wal-Mart’s embrace of the 
technology may be the cata- 
lysts it needs, he added. 

Rob Maruster, director of 
airport customer service strat- 
egy, planning and develop- 
ment at Delta, said the airline’s 
requirements differ markedly 
from those of Wal-Mart. “We 
operate in a very industrial en- 
vironment,” Maruster said, 
noting that the RFID tags will 
have to be readable while bags 
are being loaded and unloaded 
on airport tarmacs. 

Airports also have other 
wireless systems that could 
cause interference with the 
passive tags Delta plans to 





test, Maruster said. A passive 
tag has no power connection 
or transmitter and is “read” by 
an RFID scanner equipped 
with a transmitter. 
Maruster said 
Delta plans to use 
the test to deter- 
mine RFID’s ability 
to function at a range of up to 
10 feet, which would let the 
airline track bags more pre- 
cisely than it can with existing 
bar-code systems. 
He added that although 
Delta delivers 99% of the 100 
million or so bags it handles 


each year, it spends “a lot of 


money” trying to find missing 


| bags. “This is a cost-reduction 
| Opportunity,” Maruster said. 


But Delta wants to pay 5 
cents or less for each RFID 


| bag tag before it puts the tech- 
| nology into widespread use — 
| the same price Wal-Mart is 

| seeking from vendors. RFID 


tags currently sell for between 
30 and 50 cents apiece. John 


| Shoemaker, vice president of 


business development at 
Matrics, said that at high vol- 


| ume levels, the cost of an 


RFID bag tag could drop to 20 


| cents within a year. 


SCS President Barry Crop- 


per agreed that increased vol- 
| umes will drive down prices, 


| but he added that a tag re- 

| design may be required to 

| meet Delta’s cost goal. SCS is 

| working on a new form factor 

| that integrates the RFID trans- 

| mitter onto the tag, he said. 

| Pat Rary, Delta’s manager of 
baggage planning and devel- | 

| opment, said Matrics and SCS 

| will produce the RFID tags in 

| a substrate material that will 

| be combined with rolls of bar- 

| code tags. Modified printers at | 

| airport ticket counters will be 

| able to print the bar-code tags 

| and simultaneously write the 

| same information to the RFID 

| tags electronically, Rary said. 


American Airlines Inc., 


| Northwest Airlines Inc. and 
| United Air Lines Inc. didn’t 
| return calls seeking comments | 
| on whether they plan to con- 


duct similar RFID tests. D 


NOT THE FIRST TIME 


| Several other airlines have tested RFID 
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AIX Users Remain Unruffled 
By IBM/SCO Legal Scuffle 


Say licensing issue | 
isn't their problem | 
BY TODD R. WEISS | 
Corporate users of IBM’s AIX | 
version of the Unix operating 
system appear to be generally | 
unperturbed even though The | 
SCO Group Inc. last week fol- | 
lowed through with its threat 
to revoke IBM’s AIX distribu- | 
tion license [Quick- 
Link 39240]. 

Ken Ebbe, presi- 
dent of Chicago- 
based IBM user 
group Share Inc., 
said he sees the legal: 


| issues between SCO 


and IBM as separate 
from users’ day-to- 
day IT concerns. 

“My perspective 
is that we get [AIX] 
from IBM, and we consider 
the licensing issues to be 
IBM’s [problem],” said Ebbe. | 
“The lawyers will sort it all 
out.” 

Although the eventual reso- 
lution of the case could have 
ramifications for AIX users, 
and any court rulings or legal 
losses against IBM could be 


SHARE 


rm 


| “painful” for customers, “I 


SUR em TL 
sort it all out.” 


still look to IBM to resolve it,” 
Ebbe said. 

An AIX 5L user is also tak- 
ing the not-my-problem posi- 
tion. “It’s hard for me to un- 
derstand how [the case] could 
affect us,” said the enterprise 
architecture manager for a 
global food retailer who re- 
quested anonymity. If IBM 
were to lose the case, her 
company would watch to see 
whether IBM subse- 
quently changed its 
product road maps 
and then determine 
how that would affect 
the company’s infra- 
structure, she said. 

“We would be 
hard-pressed to 
change our hard- 
ware, but we could 
change our operat- 
ing system” if neces- 


| sary, the manager said. 


Vaughn Moffett, IS director 
at the Atlanta Housing Au- 


| thority, said he will continue 
| to use AIX to support his 150 


users until he’s told it’s no 


| longer licensed by IBM. “I 


love IBM AIX,” Moffett said. 
“If that happens, we'll have to 


| look elsewhere. I don’t see it 


as important right now unless 





the court makes a decision” in 


| SCO’s favor. 


Meanwhile, IBM rival Sun 


| Microsystems Inc. wasted no 


time last week in unveiling an 
advertising campaign aimed at 
prodding corporate AIX users 


| to start worrying about the 


ongoing IBM/SCO legal fight. 
The ads offer free two-day as- 


sessments to customers look- 


ing to migrate from AIX to 
Solaris. 


Offering Reassurances 
Nancy Weintraub, director of 
competitive intelligence at 
Sun, said the motivation for 
the ad campaign is “to help 


|} customers who are concerned. 
| It really depends on who 


you're talking to in an organi- 


| zation,” she said, adding that 


legal officials inside compa- 


| nies are often more worried 


than IT officials about the im- 
plications of the SCO action. 


ORC 
SCOsource unit to enforce pro- 
Cone mee acne at 


SCO sues IBM for 
$1 billion over Unix rights and 
CCM Um Lele me rtd 
to resolve alleged violations. 


SCO revokes IBM's 
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In a separate statement, Sun 
reaffirmed to its customers 
and partners “that it has li- 


| censing rights to Unix code” 
| and isn’t facing the kinds of 
| legal issues SCO is pursuing 
| against IBM. 


In March, Lindon, Utah- 


| based SCO sued IBM for 


$1 billion, alleging that IBM 


| misappropriated SCO Unix 
| trade secrets by putting some 


of the code into Linux. In the 
lawsuit, SCO gave IBM 100 


| days’ notice, as required un- 

| der the licensing agreement, 

| saying it would terminate 

| IBM’s AIX license if the com- 


pany didn’t resolve alleged 


| violations. 


That 100-day deadline was 
reached last week, and SCO is 
maintaining its position that 
AIX is an “unauthorized de- 


| rivative” of SCO’s protected 
| System V Unix code. SCO has 
| since amended its complaint 


to ask for a permanent injunc- 
tion against future AIX sales 
and has increased the dam- 
ages it is seeking from IBM to 
more than $3 billion. 

Trink Guarino, a spokeswo- 
man for IBM’s systems group, 
said IBM remains confident 
that it’s on firm legal ground. 
“As we have claimed all along, 
our license is irrevocable, it’s 
perpetual, and it can’t be ter- 
minated,” she said. “We are 


| standing by that position.” D 
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EDS Plans Cuts, 
Internal Changes 


Electronic Data Systems Corp. 
said it will lay off 2% of its 
workers and restructure its IT 
outsourcing operations as part of 
a bid to revive its fortunes. About 
2,800 of Piano, Texas-based 
EDS’s 138,000 employees will 
be let go. EDS also said it plans 
to unify its various outsourcing 
sales, service and product deliv- 
ery teams under a single global 
organization. 


West Virginia Ends 
Microsoft Appeal 


West Virginia's attorney general 
said the state is dropping its ap- 
peal of the antitrust settlement 
between Microsoft Corp. and the 
U.S. Department of Justice as 
part of a deal in which the com- 
pany will pay up to $21 million in 
cash and product vouchers. The 
agreement leaves Massachusetts 
as the lone state opposing the 
settlement of the government’s 
antitrust case against Microsoft. 


Microsoft Stops 
Mac Browser Work 


in other Microsoft news, the 
company said it will stop devel- 
oping new versions of its Inter- 
net Explorer Web browser for 
Apple Computer Inc.’s Macintosh 
systems. Microsoft plans to con- 
tinue upgrading the Macintosh 
versions of its Office and Virtual 
PC products. But it said that IE 
will be offered only within Win- 
dows and that Apple’s Safari 
browser is sufficient to meet the 
needs of Macintosh users. 


Short Takes 


WORLDCOM INC. announced an 
IP virtual private network service 
that’s designed to securely con- 
nect mobile and remote workers 
to corporate networks. . . . 
FUJITSU PC CORP. in Santa 
Clara, Calif., said it has signed a 
deal that lets SIEMENS AG resell 
its products in North America. 


| 
| 
| 
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MARK HALL #®ON THE MARK 


Open-Source Management 
Is Achilles’ Heel ... 


... for large-scale programming projects. That would be the opinion 
you’d expect to hear from the proprietary gang in Redmond, Wash., 
not from open-source advocates and board stewards of Eclipse, the open- 
source framework for application developers. But that’s the case. The 
problem is that Eclipse lets programmers easily obtain and use any 
plug-in they fancy. That may be cool for the coder, but it’s uncool for 
the corporate IT manager who wants to maintain a semblance of con- 
trol over a project. “Which plug-in do you use? Which one do you 


standardize on?” asks George Paolini, a 
vice president at Borland Software Corp. 
in Scotts Valley, Calif. Using Eclipse and 
freebie plug-ins may sound like a cheap 
way to get a program out the door, but 
Tony de la Lama, another Borland VP, 
worries that, “The problem is not the 
cost — it’s the TCO,” especially for large- 
scale projects that demand ' 5 
effective oversight. Bor- 
land, which has a seat on 
the Eclipse board of stew- 
ards and ships its products 
to be Eclipse plug-ins, ar- 
gues that users of open- 
source development tools 
need tight integration and 
management. Letting pro- 
grammers grab whatever 
they think they need and 
add it to their coding arse- 
nals is a big mistake. Even 
IBM, which launched the 
open-source Eclipse effort 
and pushes it harder than 
most companies, sees its 
limits. “I agree with the as- 
sertion that larger develop- 
ment projects and teams 


Microsoft Releases Upgraded Mobile OS 


Campbell, Calif., is an- 
nouncing today its two 
new Web site accelera- 
tors. The T/X 2600 
($39,000) and T/X 2650 
er Ce melele item cir layie 
Um CORIE UH OR Ce 
500,000 visitor sessions, 
over 10 times more than 
their little brothers, the 
2200 and 2250. The ex- 
tra 10 grand for the 2650 
is for SSL acceleration, 
PAC RET SmI 
make it faster than even 
simple text transmissions. 


benefit from higher-value integration,” 
says Bernie Spang, IBM’s marketing di- 
rector for WebSphere Studio. Spang rec- 
ollects that a few IBM customers who 
use Eclipse plug-ins have asked for that 
kind of management tool. ® Corporate 
developers wary of or indifferent to the 
open-source bandwagon next week can get 
their hands on Borland’s 
Enterprise Studio for Java 
6. It will include new ver- 
Ta sions of JBuilder and Opti- 
mizeit as well as beefed-up 
capabilities in the areas of 
design, development, test- 
ing, deployment and inte- 
gration. And if you happen 
to work in the SAP AG 
world, Borland’s real-time 
collaboration tool, Togeth- 
er, will ship in August as 
an SAP xApp. ® As part of 
SAP’s deal with MySQL 
AB in Uppsala, Sweden, to 
replace SAP’s proprietary 
database with MySQL 
[QuickLink 38764], the two 
companies agreed to give 
the SAP version an updated 
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name. The new moniker will be unveiled 
at LinuxWorld this August in San Fran- 
cisco. ® Tracy Wilk is suffering from déja 
vu. The vice president for product man- 
agement at CyberSource Corp. in Moun- 
tain View, Calif., claims that in the past 
six months, online retailers have been 
pressing his B2C payment-management 
software firm to deliver an international 
version of its application. “That talk had 
evaporated after the Internet bubble 
burst a few years ago,” Wilk says. Cyber- 
source boasts that $1 of every $8 spent on- 
line in the U.S. gets processed through its 
software. But given that Gartner Inc.’s re- 
searchers are forecasting that Europeans 
will surpass Americans as Internet 
spendthrifts in Q4 this year, U.S. retailers 
want a chance to take those euros, pounds, 
kroner and whatever else can be lifted from 
the virtual wallets of European citizens. 
So this Wednesday, CyberSource will an- 
nounce its Global Payment Suite. The 
product handles multiple payment types 
popular in Europe, such as bank transfers 
and postal checks, which is vital to a re- 
gion that uses credit cards for only 37% 
of its noncash purchases. The software 
can also perform dynamic currency con- 
version, which helps protect merchants 
from global currency fluctuations. # On 
Tuesday, Women in Technology Interna- 
tional will recognize four women for 
their outstanding achievements in IT. 
WITI, a professional organization with 
headquarters in Encino, Calif., will induct 
four women into its Hall of Fame: Chieko 
Asakawa, who runs accessibility software 
R&D for the visually impaired at IBM’s 
Tokyo research lab; Wanda Gass, a digital 
signal processing wizard (um, make that 
sorceress) for Texas Instruments Inc.; 
Kristina Johnson, an optics and display 
expert in Duke University’s School of 
Engineering; and Shirley McCarty at 
Shamrock Consulting, a legend in the 
aerospace development community. 
Congrats, ladies. D 


soft rival Palm Inc. still offers 
buyers of handheld devices 
something they can’t find in 


BY BOB BREWIN 
Microsoft Corp. today will of- 
ficially unveil an upgraded 
version of its Pocket PC mo- 
bile operating system that’s 
designed to provide users 
with improved support for ac- 
cessing Wi-Fi wireless LANs. 
Ed Suwanjindar, product 
manager for Microsoft’s mo- 
bile computing division, said 
Pocket PC 2003 — which is 
being renamed Windows Mo- 
bile 2003 — includes a new 





network connection manager 
that can be used to set up 
WLAN access with “zero con- 
figuration.” 

The upgrade also has a re- 
vamped mobile information 
server that should resolve syn- 
chronization problems users 
experienced when trying to 
update their e-mail directories 
with earlier versions of the 
software, Suwanjindar said. 

Michael Murphy, director of 
information systems support 





services at the Carlson Hotels 
division of Carlson Companies 
Inc. in Plymouth, Minn., said 
he has deployed 200 Pocket 
PC devices for use by business 
managers and his IT team. He 
described the task of setting 
up WLAN connections with 
older releases as “a challenge.” 
But Sam Bhavnani, an ana- 
lyst at ARS Inc. in La Jolla, 
Calif., said that despite im- 
provements in Pocket PC 
hardware and software, Micro- 





any Pocket PC model: a built- 
in keyboard that uses the tra- 
ditional QWERTY design. 

Dell Computer Corp. said it 
will wait until later this year to 
introduce new Pocket PC 
hardware. Hewlett-Packard 
Co. today plans to announce 
three Pocket PC models 
priced from $299 to $649, and 
Gateway Inc. in Poway, Calif., 
said it will release its first 
Pocket PC device in July, 
priced at about $300. D 





PeopleSoft Shareholders: 


DON’T LET THE BOARD 
TAKE AWAY YOUR VOTE 


ov Cash from Oracle 


_] Uncertain future with 
current management 


Look what PeopleSoft management’s done for you lately: 


PeopleSoft Stock Price Before Our Offer PeopleSoft New License Revenue Growth 


20% 


| 6/5/03 
$15.11 


a pA, Mr on 
$10 | a : -40% |___ 
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er 


No Wonder They 
Don’t Want You to Vote 


ORACLE 


Find out more at 
oracle.com/peoplesoft 


Copyright © 2003, Oracle Corporation. All rights reserved. Oracle is a registered trademark of Oracle Corporation and/or its affiliates. Other names may be trademarks of their respective owners 
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Open-Source Lab 
Hires Linus Torvalds 


The Open Source Development 
Lab in Beaverton, Ore., said it 
has hired Linus Torvalds, the 
creator of Linux, as a full-time 
employee. Torvalds will be a fel- 
low at the lab and “work exclu- 
sively on leading the develop- 
ment of Linux,” the nonprofit, 
multivendor consortium an- 
nounced. Torvalds previously 
was a fellow at Transmeta Corp., 
a microprocessor vendor in 
Santa Clara, Calif. 


Hacker Leaks CERT 
Vulnerability Info 


The CERT Coordination Center 
at Carnegie Mellon University 

in Pittsburgh was hit by another 
leak of confidential vulnerability 
information, following a flurry of 
such leaks in March. The latest 
incident involves a flaw in PDF 
readers for Unix systems, ac- 
cording to a report posted to a 
discussion list by a hacker using 
the name “hack4life.” CERT offi- 
cials wouldn’t comment about 
the vulnerability. 


SSA Global Buys 
E-Commerce Firm 


Business applications vendor 
SSA Global Technologies Inc. 
said it has bought Ironside Tech- 
nologies Inc., a Pleasanton, 
Calif.-based developer of e-com- 
merce software. The deal came 
two weeks after Baan Interna- 
tional BV said that as part of its 
buyout deal with its former par- 
ent, it will merge with Chicago- 
based SSA [QuickLink 38967]. 


Short Takes 


NEC Corp.’s NEC SOLUTIONS 
(AMERICA) INC. unit in Sacra- 
mento, Calif., announced a set 
of IT services for midsize compa- 
nies. . .. FRONTRANGE SOLU- 
TIONS INC., a CRM software ven- 
dor in Colorado Springs, said it’s 
looking for a new CEO following 
the resignation of top executive 
Patrick Bultema. 


| 
| 
| 


| 
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Senator's ‘Extreme’ Piracy 
Remedy Draws Criticism 


| Hatch later softens stance on destroying 
| computers of unauthorized file-sharers 





BY LINDA ROSENCRANCE 
SERS LAST WEEK 
said Sen. Orrin 
Hatch (R-Utah) ap- 
parently failed to 


| consider the corporate impli- 

| cations of his suggestion that 

| cyberpirates should have their 
| computers destroyed if they 


illegally download copyright- 
protected material like music 
and movies. 

Destroying an individual’s 


computer may not be feasible, 


and such an extreme remedy 
could pose problems for cor- 
porate users, said Pete Lind- 
strom, research director at 
Malvern, Pa.-based Spire Se- 
curity LLC. 
“The $64,000 question is, 

how do you address liability 


| if [an employee] is illegally 


downloading something at 


| work?” Lindstrom said. “The 
| person with the deepest pock- | 
ets most likely will be liable.” 


Lindstrom, along with an 
IT executive at a Maryland 


| computer services company 
| who asked not to be identi- 


fied, said the issue might be 
moot, since most companies 
access the Internet through a 


| series of firewalls to protect 
| their assets. 


| Disaster in the Making 


Other IT executives were 
more concerned about the 
prospect of legalizing such a 
penalty. “Depending what is 
on that PC, it could be very 


costly or even disastrous,” said 


Mehdi Shahpar, systems man- 
ager at United Parcel Service 
Inc. in Mahwah, N,J. 

“Those people that are 
downloading illegal material 
at work would cause a lot of 
problems for their companies 
if their machines were fried 
out,” said Frank Webb, an IT 
manager at American Interna- 
tional Group Inc., an insur- 
ance and financial services 
company in Jersey City, NJ. 











Webb said the person doing 
the downloading, rather than 
the company that person 
works for, should be held re- 
sponsible for his actions. 

Hatch, chairman of the 
Senate Judiciary Committee, 
first brought up the idea at 


| aJune 17 hearing on copyright 


abuses. At the time, the com- 
mittee heard from witnesses 
about the dangers of using 
peer-to-peer file-sharing ser- 
vices. Some users have inad- 
vertently allowed access to 
their entire hard drives by 
other peer-to-peer users, 





| exposing financial documents 


and medical data, the wit- 
nesses said. 
After Hatch’s proposal was 


| criticized as “Draconian” by 


Sen. Patrick Leahy (D-Vt.), the 
ranking minority member of 
the Judiciary Committee, 
Hatch backed off a bit from 
his initial hard-line stance. 

In a statement issued the 
next day, Hatch said he merely 
wants to push private industry 
to come up with solutions to 
unauthorized file-trading. 

“I am very concerned about 


| Internet piracy of personal 


and copyrighted materials, 
and I want to find effective 
solutions to these problems,” 


www.computerworld.com 


Depending 

what is on 
that PC, it could be 
very costly or even 
disastrous. 


MEHDI! SHAHPAR, 
SYSTEMS MANAGER, UPS 


Hatch said. “I do not favor ex- 
treme remedies — unless no 
moderate remedies can be 
found. I have asked interested 
industries to help us find 
those moderate remedies.” 

Hatch’s office couldn’t be 
reached for additional com- 
ment by deadline. B 


The IDG News Service con- 
tributed to this report. 


MORE THIS ISSUE 


Columnist Frank Hayes calls Hatch’s 
proposal a “bad idea.” Page 62 





CA Antivirus Software to 
Block Unwanted Downloads 


Product to provide 
common network 
security interface 


| BY JAIKUMAR VIJAYAN 


Computer Associates Inter- 


| national Inc. is boosting its 


eTrust antivirus software 
with new antispam and moni- 


| toring technologies designed 


to enable companies to take 


| measures such as blocking 


music-sharing applications 
and pornography from their 


} networks. 


CA last week announced 
plans to ship its eTrust Se- 


| cure Content Management 


suite in October. The technol- 
ogy integrates functions that 


are typically available only as 


separate products, said Ron 
Moritz, a senior vice presi- 
dent at CA. 

The idea is to give adminis- 
trators a common interface 
for securing their networks 
against a broad range of threats 
stemming from viruses, spam 
and the nonsecure sharing of 
content, Moritz said. 

A key feature of eTrust Se- 





cure Content Management is 


| an integrated policy manage- 
| ment feature that allows com- 


panies to set and enforce poli- 
cies relating to the type of 


| content that can be accessed, 


viewed or shared by users in 


| an enterprise network. Anoth- 


er feature blocks users from 


| sending confidential or sensi- 


tive information outside cor- 


| porate networks. 


CA’S NEW PRODUCT 


Integrated policy manage- 
ment for defining and enforcing 
policies relating to Web access 
and file downloads. 


Le) ar eter TT Ref 
e-mail and Web traffic to de- 
tect and block malicious and 
unacceptable content. 


Ca aera ee lca tire] 
to prevent sensitive corporate 
information from leaving an 
enterprise. 





The software also allows ad- 
ministrators to block access 
to certain Web sites or to pre- 
vent certain types of software 
— such as music-sharing ap- 
plications — from being 
downloaded. 

Such capabilities make the 
software attractive, said Dave 
Lydick, a network administra- 
tor at Sheetz Inc., a $1.2 billion 
convenience store chain with 
headquarters in Altoona, Pa. 
Sheetz uses CA's eTrust anti- 
virus software and is consid- 
ering testing the new features 
when they become available, 
Lydick said. Of key interest is 
the software’s promised abil- 
ity to weed out Kaaza peer-to- 
peer music-sharing programs 
from the company’s networks, 
Lydick said. 

At $55 per user, the technol- 
ogy is also fairly aggressively 
priced, said Brian Burke, an 
analyst at IDC in Framingham, 
Mass. CA's effort to integrate 
multiple functions into its 
antivirus software is similar to 
moves by other security prod- 
ucts vendors, Burke said. For 
instance, Network Associates 
Inc. and Trend Micro Inc. are 
also moving to integrate simi- 
lar antispam functions as well 
as message-filtering capabili- 
ties, he said. D 
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Microsoft Entices Users to Upgrade Servers 


Companies can move from standard to 
enterprise editions, pay only differential 





BY CAROL SLIWA 
Starting July 1, Microsoft 
Corp. will launch a promo- 


efit companies that want to 
upgrade from the standard to 
enterprise editions of its serv- 
er software products. 

Through the new 
Step-up License pro- 
gram, users who 
purchased Software 
Assurance or an En- 
terprise agreement for the 
standard edition of a Micro- 
soft server product will be 
able to upgrade to the enter- 
prise edition by paying only 
the price differential for the 
license plus Software Assur- 
ance. Under the existing sys- 
tem, customers must buy a 
new license when moving 
from the standard edition of 
a server product to the enter- 
prise edition. 

“T wish I would have heard 
this a month ago,” said Steven 
Edwards, vice president and 
IT director at Solomon Cord- 
well Buenz & Associates Inc. 
“We just had to rebuy our li- 
censes for [a Windows] server 
and for Exchange for clusters. 
It was expensive and painful.” 

Edwards said the Chicago ar- 
chitectural firm, which has 117 
employees, wanted to run Ex- 
change Server in a clustered 
environment so that if one 
messaging server goes down, a 
second will kick in within sec- 
onds. But the enterprise edi- 
tions of Exchange and the Win- 
dows server operating system 
are required for clustering. 

So the firm in late April 
spent $12,000 for two new 
Exchange and two new Win- 
dows server enterprise licens- 
es, knowing that the purchase 
would render its old Software 
Assurance-protected Ex- 
change Standard Edition li- 
censes useless, Edwards said. 

He said the unplanned ex- 
pense also forced the firm to 
postpone purchasing Software 
Assurance on the new servers. 

“If we added Software As- 


| 


a 
eS 


| 


| 
| 
| 


tional program that could ben- | 


surance on top of that, it 
would have been another 50% 
of the [license] cost [over two 
years], and we were already 
over budget buying two of 
everything,” he said. 

Customers pay an annual 
fee of 25% of the volume li- 
censing cost to get 
Software Assurance, 
which entitles them 
to all upgrades re- 
leased during the 
contract time frame and some 
newly added free support and 
training options. 

Rebecca LaBrunerie, prod- 
uct manager of worldwide li- 
censing and pricing at Micro- 
soft, said the new Step-up pro- 
gram is intended to help cus- 
tomers in situations just like 
the one Solomon Cordwell 
Buenz faced. 

“If the customer is off by a 


few weeks of when we an- 
nounced that license pro- 
gram, I’m sure we will work 


| with that customer to make 


sure that they can receive the 


| benefits of this program,” 
| she said. 


A vice president of IT pro- 


| curement at a multinational 


media conglomerate, who 


| asked not to be identified, said 
| that if his company had access 


| to the Step-up program sooner, | 


Software Assurance. 





it might have made different 


| decisions last year when it 
purchased SQL Server Enter- 


prise Edition CPU licenses for 
an IT project. 

The cost differential be- 
tween the standard and enter- 
prise editions can be “huge,” 
he added. He said that with his 
particular Select license agree- 
ment, the enterprise edition 
of SQL Server costs about 
$22,400 for a single processor 
license, plus three years of 
The stan- 
dard edition is about $5,600 for 





Stepping Up 

Microsoft's new Step-up License 

is available for these products 
BizTalk Server 


Commerce Server 


Exchange Server 


Internet Security & 
Acceleration Server 


SQL Server 


Windows Server 


the license and three years of 


| Software Assurance, he said. 


The IT vice president said 
that when the new Step-up 
program takes effect, he will 
opt for the standard edition 
and pay the incremental cost 
for the enterprise edition li- 


cense “only if we need it.” 


Joe Brenner, MIS manager 
at Sleepeck Printing Co. in 
Bellwood, IIl., said he likes the 


i 
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idea of the added flexibility. 

So far, most of the com- 
pany’s servers run only single 
applications, so it hasn’t seen 
a need for the additional fea- 
tures of the enterprise edition. 
“That may change in the fu- 
ture,” he said. 

The Step-up program is 
scheduled to be available 
only through September 2004. 
But Alvin Park, an analyst at 
Stamford, Conn.-based Gart- 
ner Inc., said he thinks that 


| Microsoft should make the 


Step-up License permanent. 
Park said Microsoft also 


| should expand the Step-up 


License beyond server soft- 


| ware to other products. He 
| noted that the Step-up License 
| essentially reinstitutes the 


Product Upgrade Program 


| that Microsoft eliminated on 
| Sept. 30, 2001. 


“If customers tell us they 


| want us to keep it permanent- 


| ly, we'll look at that,” 


said 


| LaBrunerie. She added that 
| Microsoft will also consider 


extending the Step-up License 


| to additional products. D 








Sybase CEO Decries SCO 


‘Garbage,’ Oracle’s Behavior 


BY DON TENNANT 

John Chen, CEO of Dublin, 
Calif.-based Sybase Inc., last 
week spoke with Computer- 
world about a range of contro- 
versial issues, including The 
SCO Group Inc.’s claims that 
Linux infringes its Unix copy- 
rights and the security implica- 
tions of offshore outsourcing. 
Excerpts follow: 


Given that Sybase has such a 
strong presence in Linux shops, 
how concerned are you and your 
customers about SCO’s claims? 
I have had customers express 
concern about it. Two major 
customers of mine have al- 
ready told me that they’re go- 
ing to slow down their roll- 
outs on Linux and wait to see 
how this develops. 

I think it’s rather a shame. 
The Linux platform serves a 
segment of the market, and I 
hate to see this being chal- 
lenged by a very established 


| player. I think it’s very unfor- 





tunate that this garbage is be- 
ing thrown around. A small 
group of players just wants to 
protect the status quo. 


Sybase and PeopleSoft Inc. have 
had a strong partnership 

for years. What’s your 

take on Oracle Corp. CEO 

Larry Ellison’s hostile 

takeover bid for People- 

Soft? It certainly won't 

be good for Sybase, be- 
cause Sybase and Peo- 
pleSoft have a Tier 1 re- 


| lationship; we have an 


installed base of 400 to 

500 customers out there, and 
we're trying to push into new 
areas like health care in China 
together. 

Larry went public to say 
that [PeopleSoft CEO Craig] 
Conway had approached him 
a year ago. I don’t know if it’s 
true or not; I’m not in a posi- 
tion to comment on that. But 





| the code of engagement be- 
| tween CEOs has certainly 


been violated. And I think 
that’s a bad thing. 


Earlier this month, you were elect- 
ed to the board of directors of the 


do you think the chamber’s posi- 

tion on H-1B visas should be? 

H-IB is not being fully utilized 

because we just don’t have 
enough jobs in the U.S. 
So right now, H-1B is 
not the biggest threat. 
I’m a supporter of 
the H-1B visa because 
most of the H-1B visa 
holders are people 
we've trained in the 
U.S. I'd rather see the 
people we've trained 
come back to the U.S. 

and help boost our IT devel- 

opment and innovation. 

The chamber probably 


| takes the same line — let’s 


create more jobs in the U.S., 
and if they need to be filled by 
foreign personnel, so be it. Ul- 
timately, it helps the economy 
because it’s innovation. 

I think your readers should 


be more concerned about the 


| whole outsourcing phenome- 
| non. Because if you have so 
| many foreigners creating code 


| tothe US., 


that is ultimately shipped back 
and if you have the 


| U.S. government policy of 


U.S. Chamber of Commerce. What | 


buying off-the-shelf software, 


| guess what’s happening? 


We may be unknowingly al- 


lowing backdoor traps in the 
| code. Hackers could very well 
| be putting in compromising 


| code. 


We have to be careful, 


| because more and more com- 
| panies, by necessity, are build- 
| ing their code overseas. 


The industry ought to come 
together and have some kind 
of standard, equivalent to an 
ISO standard, that we subject 
all of our development and 
code review to. 

The problem with the in- 
dustry is we can never agree 
on anything. But it’s some- 
thing we need to fix. D 


To read the full interview with Sybase’s 
Chen, visit our Web site 


QuickLink 39261 
www.computerworld.com 





For those of you who need a little help convincing your C.E.O. that 


BEA is the right choice for your business, please use this handy form. 





ee 
(YOUR C.E.O.) 


| recommend that we use the 
BEA WebLogic’ Enterprise Platform 
for all future software integration. 


While you may not have heard of 
BEA, they offer the only platform 
that is both strong enough to 
handle our mission-critical projects 
and is easier to use. | acknowledge 
that | am accountable for my 
actions, and am fully prepared to 
take the fall for this decision. 


But when this works, you owe 
me big. 


Sincerely, 


(YOU) 
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IT Execs “te 
Ready for 


CeBIT panelists rec ognize its potential 


but say lack of maturity still an obstacle 





BY THOMAS HOFFMAN 
NEW YORK 
IRELESS net- 
works and tech- 
nologies must 
become consid- 
erably more standardized and 
reliable before the National 
Association of Securities 
Dealers Inc. (NASD) will even 
consider porting key applica- 
tions to mobile devices. 

Martin Colburn, chief tech- 
nology officer at Washington- 
based NASD, delivered that 
message at last week’s CeBIT 
America 2003 conference 
here. Colburn said the wire- 
less maturity problem has 
been exacerbated by the eco- 
nomic downturn in the tele- 
communications industry, re- 
sulting in an underinvestment 
in research and development 
for some next-generation 
wireless technologies. 

Colburn was one of three 
CeBIT panelists who dis- 
cussed the challenges sur- 
rounding business adoption ot 
wireless systems. 

NASD, which regulates the 
Nasdaq stock market, uses 
wireless handheld devices 
for e-mail and to distribute 
spreadsheet-based certifica- 
tion exams to its member 
firms. But Colburn said it like- 
ly will be at least two to three 
years before vendors offer in- 
dustrial-strength systems that 
can run vital transactions. 


No Economies of Scale 
“When we look at total cost of 
ownership, we haven't seen 
the economies of scale and 
haven't seen the infrastructure 
there to [justify] making the 
investment,” Colburn said. 


Those issues haven't stopped | 
| ham, Mass.-based Tower- 


Schneider National Inc. from 
using mobile technologies in 
its trucking and logistics busi- 
nesses. The $2.8 billion trans- 








portation firm was ahead of 
the curve in 1988 when it im- 
plemented a two-way, geosta- 
tionary satellite communica- 
tions system to track its fleet 
of trucks. It was so far ahead, 
in fact, that Schneider was 
Qualcomm Inc.’s very first 
customer, said Paul Mueller, 
vice president of technology 


| services at Green Bay, Wis.- 


based Schneider. 

Mueller said the satellite 
system has helped Schneider 
provide its customers with 
better visibility of goods that 
are in transit. But, he added, 





NEWS 


the company has had a much 
harder time finding the right 
wireless system to help track 


- | and manage the 45,000 trailers 


hooked up to its trucks. 
Schneider has looked at a 
plethora of wireless systems 
since 1995, including low-band 
satellite and cellular technolo- 
gies. But each time it consid- 
ered a particular technology, 
the vendors in question went 
belly-up, Mueller said. 


Decision Soon 

Nonetheless, Schneider ex- 
pects to make a decision with- 
in the next few months ona 
trailer management system 
based on either satellite or 
multimode cellular access 





Wireless Isn't 
ide Adoption 


technologies. “The payback is 
clearly there,” Mueller said. 
“It’s just a matter of finding a 
technology that works for us.” 
Wireless Retail Inc. in 
Scottsdale, Ariz., sells wireless 


The payback 

is clearly 
there. It’s just a 
matter of finding 


| a technology that 


works for us. 


Pec ecccsceseseseesseoessceseees 


PAUL MUELLER, VICE PRESIDENT 
OF TECHNOLOGY SERVICES 


| SCHNEIDER NATIONAL INC 
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products and services through 
retailers, and CIO Chris Mc- 
Mahan said the company uses 
mobile technologies within its 
own operations to help busi- 
ness managers track sales. 

Each night, when all the 
stores that sell its products 
have closed, Wireless Retail 
uses a wireless system to send 
a snapshot of daily sales data 
to top executives, who receive 
the reports on their handheld 
devices and notebook PCs. 

Bui even though wireless 
products are the company’s 
lifeblood, McMahan acknowl- 
edged that Wireless Retail 
also faces challenges in adopt- 
ing the technology more wide- 
ly for business uses. 

With handheld devices, 
“you can’t send and receive 

-mail easily or conduct trans- 

actions easily,” he said. “I 
think we’re still in the midst of 
the maturation of the market 
and of people becoming com- 


| fortable using them.” D 





Securities Firms Keep IT 
Spending Conservative 


BY LUCAS MEARIAN 
NEW YORK 


| IT managers from Wall Street 
| firms converged on the Secu- 


rities Industry Association’s 
(SIA) Technology Manage- 
ment Conference last week, 
many looking for better ways 
to make the most out of 
what they already have 
in place. 

With IT budgets still 
constrained at many fi- 


nancial services firms, 


SIA President Marc Lackritz 


| told conference attendees 
| that the securities industry as 


a whole is no longer a bleed- 


| ing-edge adopter of new tech- 
| nology. Most IT dollars are 

| going toward business conti- 

| nuity, risk management and 

| applications that help inte- 

| grate and consolidate systems, 


Lackritz said. 
Citing a prediction by Need- 


Group that IT spending in the 
financial services industry 
will shrink from $23.1 billion 


| 
| 
| 
| 
| 
| 
| 
| 
| 


WALL 
STREET 





in 2002 to $21.9 billion this 
year, Lackritz noted that IT 
executives who are investing 
in new projects are being care- 
ful to match them to specific 
business needs. “In that con- 
text, spending less may not be 
a bad thing,” he said. 

Lackritz’s comments hit 
home with IT managers 
like Donald Haile, pres- 
ident of Fidelity Invest- 
ment Systems Co., the 
technology division of 
Boston-based FMR Corp. Haile 
said he’s trying to deal with the 


| challenge of managing 14 
| mainframes, 1,500 network 


switches, 500-plus routers and 
an abundance of servers — 


9,000 in three data centers. 


Fidelity’s IT team recently 
uncovered numerous redun- 


| dancies in the company’s core 


systems infrastructure and its 
desktop environment. Haile 
said he now plans to consoli- 
date systems in order to pay 
for new applications that he 
hopes will help the IT unit 





boost the efficiency of its pro- 
duction processing operations. 
One way Haile will try to re- 
duce costs is by using Linux 
on blade servers that run some 
compute-intensive applica- 
tions, a change that could low- 
er the current server costs by 
at least 25%. But Haile added 
that he isn’t ready to consider 
Linux for mission-critical data 
center applications, because 
the open-source operating sys- 


| tem still needs to prove that 


it’s robust enough. 


Reducing Overhead 
Amir Abouelnaga, a program 
manager at Northrop Grum- 
man Corp.’s information ser- 
vices group, said he’s explor- 
ing the possible use of tech- 
nologies like XML as part of a 
planned data mining system 
that will be tied to a large 
number of databases contain- 
ing information about the 
Herndon, Va.-based compa- 
ny’s government contracts. 
“We want to reduce over- 
head to administer contracts,” 
Abouelnaga said, adding that 
he hopes Northrop Grumman 
workers will be able to pin- 
point best practices hy com- 
paring different contracts. 





Currently, the various databas- 
es can’t interoperate with one 
another, he said. 

Dennis Mooradian, chair- 
man and CEO of Minneapo- 
lis-based Wells Fargo Invest- 
ments LLC, fired a volley of 
criticisms at IT managers 
during a speech at the confer- 
ence and reminded attendees 
that technology “is not the 
business” of financial ser- 
vices firms. 

Mooradian warned about 
the dangers of buying un- 
proven technology. In addi- 
tion, he said that he had never 
seen an IT project come in on 
time and on budget, and he 
recommended that, if any- 
thing, technology managers 
should pad estimated project 
costs instead of low-balling 
business executives. But he 
added that for many IT execu- 
tives, it will continue to be dif- 
ficult to “get money out of the 
CEO for projects” until the 
economy improves. D 


| REGULATORY BURDENS 


Requirements to archive messages and 
monitor customers for money laundering 
could lead to more IT outsourcing: 


QuickLink 39358 
www.computerworld.com 
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Server blades engineered to work 
across complex computing environments. 


HP ProLiant server blades, powered by Intel” Xeon™ processors, are designed to support a variety of robust enterprise solutions, 
including SANS. It is not difficult to appreciate the architectural excellence of the new HP ProLiant BL40p and BL20p G2 server blades. They're the most powerful, flexible 
industry-standard blades for business today. In addition to meeting your company’s expanding needs for server capacity, they're designed with SAN connectivity to support 
sophisticated storage environments—easily, reliably and affordably. Combined with HP ProLiant Essentials software, they can dramatically reduce deployment time and help 
maximize productivity. Which means, of course, your business saves money. Demand more from your IT systems. Integrate HP ProLiant server blades into your environment 


And carry your business to a stronger, more cost-effective place. 


| Complements ProLiant 
server blades 
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HP MODULAR SAN 
ARRAY 1000 
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Continued from page 1 
PeopleSoft 


man confirmed that People- 
Soft has initiated “a prudent 
response to Oracle’s attempt 
to disrupt our business.” He 
added that PeopleSoft is tak- 
ing steps “to protect our cus- 
tomers’ investments and our 
market position.” 

Jim Prevo, CIO at People- 
Soft user Green Mountain 
Coffee Roaster Inc. in 
Waterbury, Vt., said 
he has heard about 
such letters but has- 
n’t seen one. Prevo 
described the refund provi- 
sions spelled out in the letter 
as “a good offer” for users. 

“If I had any pending pur- 
chases with PeopleSoft, I'd 
move forward as a vote of con- 
fidence in the management 
team,” Prevo said, noting that 
the promise of refunds would 
let users do so “without extra- 
ordinary financial risk.” 


PeopleSoft and J.D. Edwards | 


users alike have said that they 
may put off software purchas- 


es until the buyout fracas is re- | 


solved [QuickLink 39178]. 

For example, Bruce Leidal, 
director of technology at 
Hayes Lemmerz International 
Inc. in Northville, Mich., last 
week said the uncertainties 
raised by Oracle’s offer may 
affect a plan to consolidate the 
automotive parts maker’s ERP 
systems. 

Leidal said he sees potential 
benefits in PeopleSoft’s plan 
to acquire J.D. Edwards be- 


Edwards’ manufacturing appli- 
cations and PeopleSoft’s hu- 

| man resources software. But 

| now, he said, “maybe we ought 

| to stand away from a selection 
with Oracle, PeopleSoft or J.D. 

| Edwards.” Hayes Lemmerz of- 

| ficials planned to meet with 

| ERP market leader SAP AG 

| last week, Leidal added. 


lyst at Enterprise Applications 
Consulting in Daly City, Calif., 


| es. He said license fees typi- 

| cally amount to only 10% to 

| 15% of the total cost of owner- 
| “Everything [PeopleSoft CEO 
| multiple yardsticks,” said 

| is at least in part meant to 


| Soft is desperate to make its 


| about the refund offers. But it 
made clear that it plans to 


| cle’s suit is one of a flurry of 


| Soft user (see story, top right). 


cause it would combine J.D. 


Joshua Greenbaum, an ana- 


said he’s not con- 
vinced that the re- 
fund deals will per- 
suade users to go 
ahead with purchas- 


ship for business applications. 


Craig Conway] does at this 
point can be measured by 


Greenbaum. The refund offer 


“thwart Oracle’s efforts,” he 
said, but its real purpose is to 
close deals, because People- 


numbers. 
Oracle declined to comment | 


push ahead with the takeover 
bid, increasing its original $5.1 
billion offer and filing a law- 
suit against PeopleSoft, its 
board and J.D. Edwards. Ora- 


legal actions involving the 
three vendors and a People- 





The initial purchase price 


SAP Users Happy to Avoid Turmoil 


ORLANDO 

Some IT managers who use SAP 
AG's business applications said 
last week that they're breathing 
easy as they watch Oracle Corp. 
try to buy PeopleSoft Inc. in a 
takeover bid that has customers 
of those two vendors - and of 
J.D. Edwards & Co. - in tempo- 
tary limbo. 

“We're certainly not con- 
cerned anyone is going to come 
and take over [SAP] anytime 
soon as long as they can stay the 


course, and that’s very good,” 
said Gerrard Rutter, vice presi- 
dent of information services at 
software vendor Adobe Systems 
Inc., an attendee at SAP’s Sap- 
phire 03 user conference here. 
San Jose-based Adobe uses 
SAP's R/3 ERP applications and 
plans to deploy its CRM software 
to replace an existing installation 
trom Siebel Systems Inc. Rutter 
said Adobe also is due to go live 
with PeopleSoft's quality man- 
agement application within the 


NEWS 


Connecticut Files Suit Against Oracle 


Oracle Corp.'s attempt to buy 
PeopleSoft Inc. has begun to 
spawn a mushroom cloud of liti- 
gation - including an antitrust 
lawsuit filed against Oracle by the 
Connecticut state government, 
which is in the midst of a $100 
million PeopleSoft project. 
Connecticut Attorney General 
Richard Blumenthal filed the suit 
last week in U.S. District Court in 
Hartford, alleging that a takeover 
of PeopleSoft would violate state 
and federal antitrust laws and 
damage the state by causing “an 
enormous and expensive up- 
heaval” of its ongoing project. 
Blumenthal's action followed 
an announcement by Oracle that 
it's suing both PeopleSoft and 


that Oracle announced June 6 


| was widely viewed as a low- 


ball bid. The new offer makes 
the proposed buyout “a viable 
deal,” said Barton Goldenberg, 


| a CRM software analyst at 


Bethesda, Md.-based consult- 
ing firm Information Systems 
Marketing Inc. However, he 
predicted that PeopleSoft 


& With the 
raised price, 

it shows Oracle is 

in the game to win. 


VICTOR BURGESS, VICE PRESIDENT 
AND GENERAL MANAGER OF 
ALLIANCES, AFFINA 


next couple of months but added 
that he’s not concerned about 
Oracle's bid for the Pleasanton, 
Calif.-based company. 

“At the end of the day, if Ora- 
cle determined not to move for- 
ward with that [application], we 
would be OK because it’s not the 
kind of thing we're going to 
change out in our business,” Rut- 
ter said. 

Patti Walker, ClO at Fender 
Musica! Instruments Corp. in 
Scottsdale, Ariz., said the uncer- 
tainties surrounding PeopleSoft, 
Oracle and Denver-based J.D. 





J.D. Edwards & Co. in an attempt 
to stop the amended merger deal 
between those companies and 
remove a “poison pill” provision 
that PeopleSoft has in place to 
block unwanted takeovers. 

PeopleSoft and J.D. Edwards 
previously filed separate suits 
against Oracle. 

Connecticut's government in 
2002 signed a five-year contract 
to convert its IT infrastructure to 
PeopleSoft’s applications, and 
the new Core-CT system is due 
to begin its first phase of opera- 
tion in July. Comptroller Nancy 
Wyman said in a statement that a 
takeover of PeopleSoft would 
cost the state much of what it 
has spent on the project and 


stockholders will still reject it. 

In fact, PeopleSoft’s board 
of directors on June 20 reject- 
ed the new offer and urged 
stockholders to do the same 
[QuickLink 39363]. 

Several Oracle users attend- 
ing a CRM conference in 
Boston that was sponsored by 
the Digital Consulting Insti- 
tute also said the higher offer 
gives more credence to Ora- 
cle’s effort to buy PeopleSoft. 

“There’s a lot of talk that 
maybe [the takeover attempt] 
was just a tactic rather than a 
true, honest and earnest bid. 
With the raised price, it shows 
Oracle is in the game to win,” 
said Victor Burgess, vice pres- 


| ident and general manager of 


Edwards make her feel even 
more comfortable about signing 
on to use SAP's applications. 

Fender is slated to begin 
rolling out an SAP-based system 
in July as part of a plan to re- 
place 20-year-old packaged ap- 
plications that have been heavily 
customized. 

Walker said Fender settled 
on SAP shortly before People- 
Soft announced a deal to acquire 
J.D. Edwards and Oracle re- 
sponded by launching its unso- 
licited bid for PeopleSoft. “We 
made the choice earlier, when it 


www.computerworld.com 


force it to buy new software from 
another vendor. 

However, those concerns are 
based on an expectation that Or- 
acle will discontinue PeopleSoft's 
products - something it insisted 
it doesn't plan to do. Oracle has 
said it wouldn't actively market 
PeopleSoft's applications to new 
users, but Oracle CEO Larry Elli- 
son wrote in a letter to Connecti- 
cut officials that the software 
would still be sold and supported 
for existing customers. 

Blumenthal said through a 
spokesman that he’s willing to 
discuss the matter with Oracle. 
But, he added, “nothing we have 
learned so far has diminished our 
determination to pursue this an- 
titrust enforcement action.” 

~ Marc ¢.. Songini 


| alliances at Affina, a company 
in Peoria, IIl., that provides 
customer service outsourcing. 
Affina uses Oracle’s CRM 
modules and its Oracle9i ap- 
plication server software. 
PeopleSoft and Denver- 
based J.D. Edwards changed 
their acquisition deal from an 
all-stock transaction to one 
that includes a cash payment 
of $863 million and a total val- 
ue of $1.75 billion. That would 
eliminate the need for People- 
Soft’s shareholders to vote on 
the proposed merger, which 
Oracle has said it would re- 
assess if it buys PeopleSoft. D 


| Reporter Patrick Thibodeau 





contributed to this story. 


was harder to decide” which 
business applications vendor to 
go with, she said. 

Henning Kagermann, SAP's 
chairman and CEO, said during a 
press briefing that the company 
has no plans to join the buyout 
frenzy. 

He added that even if Oracle 
does purchase PeopleSoft, “the 
combined forces are not more 
than half our market share, and 
the distance is large enough so 
that there is no need to adjust 


anything.” 
~ Marc L. Songini 
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Are you really as dense 
as we think you are? 


As racks become increasingly popu- 
lated with thinner, deeper servers, 
high power densities in your server 
room or data center can create 
havoc, from early equipment failures 
to expensive, forget-about-your-job- 
security downtime. 


Introducing InfraStruXure™ architec- 
ture, the industry's only patent-pend- 
ing, network-critical physical infra- 
structure. InfraStruXure™ lets you 
target power and cooling precisely 
where your mission-critical applica- 
tions live—the rack enclosure. 


And because InfraStruXure architec- 
ture uses a modular, manageable, pre- 
engineered approach, you can select 
standardized components to create 
your own customized solutions. 


Which means you can target avail- 
ability, pay as you grow, adapt to 
change, and maximize efficiency 
while minimizing installation, operat- 
ing, service, and maintenance costs. 


In times like these, it pays to think 
smart. For more information on 
InfraStruXure’s open, adaptable, 
and integrated architecture for on- 
demand, network-critical physical 
infrastructure, visit us online today 
at www.apc.com. 


Tagnuntatms 


Winner of the Windows and .Net Magazine “2002 Reader's 
Choice Award for Best High Availability Solution”, the GCN 
‘Best New Technology Award” at FOSE, March 2002 
(Awarded to PowerStruXure™, which is now included under 
the InfraStruXure™ brand.) Winner of the Communications 
Solutions Magazine's “2002 Product of the Year” award. 
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[power routing] 


High power densities can create hot 
spots, which cause equipment failures 


and expensive downtime. 


ean: 


(floor plan) 





Traditional data centers are built out 
for future capacity and require a 
large amount of floor space that 
could be otherwise utilized. High 
power density racks create danger- 
ous hot spots. 


[data routing] 


infraStrup Cure 


a 


Open, adaptable and integrated 
architecture for on-demand 


network-critical physical infrastructure 


[cold air] 


InfraStruXure’s advanced cooling 
components help remove heat from 
your servers and target air circulation 
where it is most needed. 


Air components designed for 
InfraStruXure™ are manageable via 
network technology, and feature a 
modern, reliable design with fewer 
moving parts. 


a 


| 
| 


(floor plan) 


InfraStruXure™ lets you build out capacity 
only as it's required. Save up to 50% 
CapEx and 20% OpEx*, and reclaim an 
average of 20% usable space. 
InfraStruXure AIR delivers cooling 
directly where it is needed, eliminating 
dangerous hot spots. 





| “Our Video on Demand (VOD) 
servers are air cooled from front 
to back. The APC racks that 
house the InfraStruXure are also 
designed to cool from front to 
back. So the same racks can 
effectively house our power sys- 
tem and our servers." 
Vince Pombo 
Vice President of Engineering 
Rich Flanders 
Director of Engineering 
Time Warner Cable 


“If | had purchased the incum 
bent vendor's 3-phase upgrade 
model, | would have paid 75% 
more in service costs over the 
next four years and | would 
have had to utilize 50% more of 
my precious floor space 

Captain Timothy Riley 


Support Services Division 
City of Newport Beach Police Department 


{ , 


Every product carrying this mark has 
been tested and certified for use with 
InfraStruXure™ architecture. Before 
you buy, check for the X to guarantee 
product compatibility. 


Legendary Reliability” 


* Representative savings based on projected power infrastructure build-out costs and estimated service cost per unit.Actual savings may vary. 
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White Paper on “Avoiding Costs from Oversizing Data Center and 
Network Room Infrastructure” and Free InfraStruXure” Brochure 
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NEWS 


Va. County’s IT’ Governance 
Approach Helps Protect Budget 


Spending to drop in new fiscal year, but 
work on key tech projects will continue 





BY THOMAS HOFFMAN 
FAIRFAX, VA 
ANY STATE and 
local government 
IT departments 
face massive cut- 
backs because of the weak 
economy and declining tax 
revenue. But in Fairfax Coun- 
ty, Va., $9 million is being set 
aside to continue a series of 1T 
modernization projects in the 
fiscal year that starts July 1. 
That’s a 35% decrease from 
the amount earmarked for 
such projects two years ago, 
and the county’s spending on 
IT operations has dropped by 
10% as part of a belt-tighten- 
ing by all departments. None- 
theless, top technology execu- 
tives here said they were able 
to preserve the modernization 
budget line thanks in large 
part to the way the county 





manages its IT resources. 

Fairfax County encourages 
both cooperation and compe- 
tition among agencies that are 
in pursuit of IT project dol- 
lars. On the cooperation side, 
IT director Wanda Gibson and 
IT project portfolio manager 
David Bartee said they and 
other county executives look 
for common threads among 
project requests. 

For instance, the Fairfax De- 
partment of Public Works and 
Environmental Services in the 
spring of 2002 proposed that a 
25-year-old mainframe-based 
inspection-tracking system 
used to monitor permits for 
buildings, contractors, electri- 
cians and plumbers be re- 
placed by a new one built 
around a Sun Solaris server 
and an Oracle database. 

After receiving the request, 


a seven-member steering com- 
mittee that makes strategic IT 
spending decisions saw an op- 
portunity to expand the new 
system to agencies such as fire 
and rescue, planning and zon- 
ing, and health services. 

“Having a single repository 
for project requests helps us 
to synchronize with other 
agencies on similar projects,” 
said Stephen Garnier, who 
works in the county’s Office of 
Building Code Services and is 
project manager for the in- 
spection-tracking system. The 
first phase of the project, the 
rollout of a complaints man- 
agement module, is due to be 
completed in late summer. 

Garnier added, though, that 
the presence of the IT steering 
committee also forces agen- 
cies competing for funding to 
be “even more articulate” in 
communicating the expected 
benefits of projects. 

Like many organizations, 
| Fairfax County had highly de- 





centralized IT spending and 
decision-making until the 
mid-1990s. The county’s 55 
agencies budgeted for and ran 
their own systems, a process 
that led county officials to rec- 
ognize “that we needed to pull 
IT together,” Gibson said. 

In addition to creating the 
internal steering committee, in 
1995 the county set up an IT 


| advisory committee that in- 


cludes private-sector execu- 
tives and other external mem- 
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bers (see box below). 

That same year, Fairfax 
County merged its IT infra- 
structure and telecommunica- 
tions groups into a centralized 
organization and created sepa- 
rate positions for a CIO and a 
director of IT. It also added an 
IT portfolio management po- 
sition, the one now held by 
Bartee, years before many 
companies even considered 
taking that approach to evalu- 
ating their spending. 

Fairfax County has “one of 
the best-run public-sector IT 
departments in the country,” 
said David Banks, a Gartner 
Inc. analyst. “They have ex- 
tremely sharp people, all the 
way from the data center on 
up to the top ranks.” D 


Fairfax County’s IT Governance Model 





Utility 


Computing Just Starting 


To Evolve, Sun IT Exec Says 


BY CRAIG STEDMAN 
As vice president of IT opera- 

tions at Sun Microsystems Inc., 
Jay Littlepage is in charge of the 


company’s internal systems and | 


the utility computing services it 
offers to corporate users. Lit- 
tlepage last week spoke with 
Computerworld about utility 
computing from both the ven- 
dor’s and users’ viewpoints. 


How far along is utility computing 
in its development? It’s not ma- 
ture at all. A lot of [vendors] 
are trying to define utility 
computing as logical exten- 
sions of what they’ve already 
done. Sun is no different; we 
view this as a logical exten- 
sion of network computing. 





And in large part, because the 
industry is in its infancy, all of 
us are right in the way we're 
defining it. In the long term, 
it’s going to be up to customer 
choice. 


How long do you think it will be 
before utility computing becomes 
a mainstream sort of thing? If 
you define “main- 

stream” as the majori- 

ty of users looking at 

this as the primary 

way of purchasing IT, I 

think it’s probably five 

years. 


Have Sun and other ven- 
dors figured out how to 
price this yet? There’s 


utility pricing now, but it’s 
very coarse pricing. Our Sun 
Power Unit [usage measure- 
ment] is defined as 1GB of 
storage or a 1-GHz CPU. 
That’s not necessarily going to 
be the right measurement, de- 
pending on what your particu- 
lar business process is. I’m 
running a series of [pricing] 
pilot programs inter- 
nally that are designed 
to be more reflective 
of the specific busi- 
ness processes we 
have. Those should 
lead to more refined 
and relevant metrics. 


How long will it take to 
put those metrics in 





place? The pilots started in 
March. We’re in the analysis 
stage now, and they’re all de- 
signed to be completed by 
September. But this is a jour- 
ney. We’re going to learn a lot 
out of the four pilots, some of 
which will result in new utility 
computing products from Sun 
and some of which will result 
in new pricing models. And 
some are going to turn out to 
be really stupid ideas. 


Is there going to be enough busi- 
ness for all the vendors that are 
targeting utility computing? Sure 
there is. This is going to be 
much more closely correlated 
with demand [for IT 
resources], and that’s going to 
be great for the marketplace. 


Great for users, or for vendors? 
Ultimately, both. It’s definitely 
going to be great for cus- 
tomers, because they won't 
have to overbuy. But it will be 





great for vendors that are real- 
ly in tune with the needs of 
their customers, too. You’re 
going to have good long-term 
relationships. It’s a much 
healthier cycle than just sell- 
ing them a box. 


Sun doesn’t have the manpower 
or IT services track record that ri- 
vals like IBM and HP do. How are 
you going to compete against 
them in utility computing? We’re 
not going to compete directly 
with them in the same way 
they’re trying to address the 
market. Our strategy has al- 
ways been to solve the needs 
of customers without throw- 
ing a lot of people at prob- 
lems, and there’s still very 
much of a belief [at Sun] that 
that’s the right way to provide 
services. We'll also rely on 
partners to help us. We don’t 
do business process re-engi- 
neering, but we have lots of 
friends that do. D 
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S Sh s | nior fellow at Hackett. “There’s ; also lack a direct link to CEOs, 
urvey OWS Common IT Woes Persist | no underlying process model to | Frank said. Hackett’s survey 

| them.” For example, only 37% | found that less than one-third 
BY JULIA KING | partments from the also-rans cording to Hackett analysts. | of the “average” companies of CIOs report to their CEOs 
It’s déja vu all over again at | is their level of business al “Most IT organizations still | have a formal IT program man- | at businesses in the “average” 
most companies when it ment and the sophistic f | look like a Rube Goldberg [ma- | agement office in place, he said. | category. At world-class com- 
comes to their track records their internal IT processes, ac chine],” Allan Frank, a se- Too many IT departments panies, that figure is 42%. D 
in using IT to help achieve SS SS ————— <= SS ae 
business goals. 

Consider the following: 


m@ At companies that aren’t | | 
among the top 25% of technol- | | O ut-of-t h e- Box 
ogy users, three out of 10 IT ° 
projects fail on average. Best Pra ctices 

@ Less than 40% of IT man- 
agers say their staffs can react 
rapidly to changes in business 
goals or market conditions. 

@ Less than half of all com- 
panies bother to validate an IT 
project’s business value after 
it has been completed. 

Those are just a few of the 
findings from a survey of IT 
managers at about 2,000 com- 
panies, including more than 
80% of the Fortune 1,000. The 
survey, which was conducted 
by The Hackett Group in At- 
lanta and is due to be released 
this week, rates the top 500 of 
tho: mpanies as “world- 

c IT users. The rest of the 
pack is classified as “average.” 

“None of these results sur- = 
prise me,” said Bill Finefield, Outside-the-Box 
CIO at the Navy Exchange 
Service Command in Virginia Th ; a 4 a g 
Beach, Va. “Companies tend to | 
build a great case for an IT 
project, and then they tend 
not to follow up to see if they 
achieved what they expected.” 

“There should be a very 
well-understood process P Seen, 
around when and how IT is Your Business, Your Way. | od 
going to measure value,” said nes a o 
Joyce Young, CIO at UOP LLC You want to think outside the box. 
in Des Plaines, Ill. But equally * 
important is how well IT com- Your budget calls for “out of the box —— Cs 
municates with business lead- ; ; > . 
ern, Wieng odd. Maes FE aa Don’t you wish you-could have both Re 
agers “don’t have really strong 
relationships on the user side, 
and we have to say no a lot,” 
she said. “Having a well-un- 
derstood set of project priori- 
ties should help.” 

UOP, which develops 
process manufacturing tech- 
nology for petroleum refiners 
and petrochemical companies, 
is implementing a portfolio www.remedy.com/advantage 
management approach to 
tracking IT projects. 

By far, the biggest factors 
separating world-class IT de- 











Michele Hudnall is recognized as an authority in the 
business of IT operations, enterprise service man- 
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Michele is ITIL-certified and holds a BBA in busi- 
ness management from James Madison University. 
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A few minutes with Michele Hudnall, 
Senior Research Analyst, 
Meta Group 


Service Desk Outsourcing 


> What are the typical services delivered 
through a “Service Desk?” How is it different 
from a Help Desk? 


| consider a Help Desk more of a dispatch center where 
employees take calls reactively as problems occur. They may 
have some limited capabilities to resolve problems, but Help 
Desk staff are generally limited to taking calls about some IT- 
related error and passing the information forward. In con- 
trast, a full Service Desk receives calls from multiple methods 
(voice, electronic/web) and takes calls on a variety of things, 
such as telecom and service requests that go beyond the stan- 
dard “how to” support, as well as IT-related problems. Service 
Desk staff are also more skilled and more empowered at 
problem resolution, so they can handle things on the first 

call more frequently. 


> What are enterprises really looking for by 
outsourcing their Service Desk—cost saving 
or increased quality of service? Are their 
expectations typically met? 


There are two facets here. The folks looking for only cost 
savings are generally outsourcing a Help Desk, not a Service 
Desk. Ironically, such companies don’t usually realize the hard 
cost savings they want because they fail to manage the transi- 
tion and monitor the outsourcer to make sure that costs 
remain flat or decline 

Conversely, companies that treat their Service Desks more 
strategically are interested in outsourcing as a method of tap- 
ping into the best practices of folks who do this for a living. 
They're interested in the soft savings to be realized by out- 
sourcing like looking at the types of requests that are being 
made in order to prevent or eliminate such calls in the future, 
thus increasing productivity. 


> What factors must be considered when com- 
paring insourcing versus outsourcing Service 
Desk functions? 


For companies considering outsourcing a Service Desk, it’s criti- 
cal that they benchmark their current level of service—as well 
as current costs—before they start an engagement. Otherwise, 
there’s nothing to compare the outsourcer’s service with. 
Other things to consider: The outsourcer’s breadth of service 
offering, geographical coverage and experience level at deliver- 
ing consistent, defined processes. 


> When evaluating sourcing options, what are 
the key areas of tangible and intangible costs 
that must be considered? 


Generally, the key indicator to consider is cost per call, because 
it encompasses a variety of costs, both tangible and intangible. 
By watching how costs per call trend over time and comparing 
them with Service Desk hiring patterns as well as desk activity, 
companies can draw a number of conclusions. For example, the 
biggest cost for any Help or Service Desk is people, and the 
challenge is to provide consistent services while keeping that 
cost flat. Consequently, many companies introduce automated 
technologies for routine services that increase efficiencies. This 
should be reflected in a lower cost per call. 


“The Service Desk is 
helping the CIO make 
better choices.” 


> Service Desk is often viewed as a commod- 
ity service by the lines of business in an enter- 
prise. Ils the Service Desk actually strategic? 


If a company’s Service Desk is really a Help Desk, the percep- 
tion is correct, but there are strategic uses of Service Desks 
as well. For example, if you take the wealth of data generated 
by a Service Desk and use it as a tool to better manage the IT 
organization and infrastructure, that’s strategic. For example, a 
company who learns from their service desk data that operat- 
ing problems occur as a result of an existing process, can bene- 
fit from learning what in that process should be re-engineered 
in that process to eliminate those concerns. The Service Desk 
is helping the ClO make better choices. It’s strategic when you 
can take the data and use it to better manage the human 
resources in IT as well. 


For more information, please call 800-874-8647 x385 
or visit www.unisys.com/networkservices 


UNISYS 


Imagine it. Done. 











~ La-Z-Boy thought 
managing its servers 
_~would never be simple. 





AY -eolt ee retalt( 8 ON (o> MRS “TACT 01s (0) ole) 


_ Consulting. 








Imagine it: 
Fighting complexity. Scaling up with simplicity. 
The JT team at La-Z-Boy Incorporated experi- 
enced an explosion of servers and applications. 
One Unisys ES7000 enterprise ae simplified 
management to a Ree platform, and 

oe "offered flexible partitioning to adjust to 


> changing needs. 


Done: G 
Today the Unisys ES7000 family of enterprise 
ft oF servers comes with true self-managing, self- 


healing systems to harness the massive power: + 


— of up to 32 Intel” Xeon™” processors. It can a 
also help simplify your Beene through Lee ee 
| standardization on Microsoft® Windows 

2000 Datacenter Server. One more detail: 

the cost of the ES7000 is as low as 1/3 the 





cost of comparable-UNIX systems. 
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OPINION 


PATRICIA KEEFE 


Dumb Vendor Driving 


N CASE YOU HAVEN’T NOTICED, it’s getting 
downright nasty on the information super- 
highway. We’ve got a pack of vendors careen- 
ing all over the place, trying to force one an- 


other into t 

SCO, already tailgat- 
ing Linux users and su- 
ing IBM, last week, re- 
voked IBM’s Unix li- 
cense and attacked Lin- 
ux icon Linus Torvalds. 
How’s that for road rage? 
Microsoft, meanwhile, 
has ordered its crew to 
cut off Linux sales at any 
cost. Oracle is bearing 
down on PeopleSoft, giv- 
ing rise to fears that it 
will crash that vendor’s 
product line in a hostile takeover 
bid. In defensive maneuvers, Peo- 
pleSoft and J.D. Edwards each sued 
Oracle, which sued them right back, 
only to be sued in turn by the state 
of Connecticut. Rubbernecking on 
the sidelines are Sun, SAP and 
Sybase, all hoping to pick up any 
dazed and shaken users they find 
along the road. 

When they haven’t been ramming 
one another, vendors have been 
merging. In between trying to shake 
off Oracle’s advances, PeopleSoft is 
attempting to buy J.D. Edwards. 
Palm bought Handspring, Mercury 
Interactive snapped up Kintana, 
Baan was sold to a group of in- 
vestors, and Corel agreed to be ac- 
quired by Vector. 

And just for good measure, ven- 
dors have been gunning for stricter 
license compliance. 

Beat ’em or join ’em; it’s all about 
new revenue streams: getting more 
of them, and ever more desperately 
driving rivals away from them 

Of course, this is what businesses 
do. It’s called competition, and 
when it works, it can shake out mar- 
kets, strengthen players and stream- 
line technology choices. But out on 
the information superhighway, reck- 
less displays of competitiveness and 





1e breakdown lane. 


aggressive grabs for 
money could spook 
users into just pulling 
over and waiting things 
out. How many plans to 
buy technology from 
Linux suppliers, People- 
Soft or J.D. Edwards slid 
to the back burner this 
past week? 

This ought to scare 
vendors, especially giv- 
en two recent reports 
from Forrester Research 


| and Meta Group that indicate that 
| as many as 30% of North American 


companies plan to cut their IT 
spending to below their 2003 levels 
[QuickLink 39129]. 

This frenzied vendor pileup, and 
the ensuing marketing and legal bat- 
tles, could backfire for the protago- 
nists — specifically by adding more 
FUD into a market where users are 
already fumbling with ROI road 
maps and stymied by countless rea- 
sons not to buy. Oddly, this high- 
tech implosion is happening just 





when the stock market appears to 
be on a roll (relatively speaking) 
and we are seeing a glimmer of 
hope for a recovery. 

Some mergers do make sense, but 
others are merely egocentric or fi- 
nancial exercises. Most are highly 
disruptive. Some will go down as 
abject failures. One thing is certain: 
The longer these merger battles and 
lawsuits rage on, the more the in- 
dustry is likely to stagnate. 

You’d think the 1990s would have 
made clear the dangers of obsessing 
too much over your rivals or specif- 
ic technologies. There are plenty of 
examples where vendors spent so 
much time worrying about all the 
wrong stuff that they took wrong 
business turns. There was 3Com’s 
obsession with Novell; Novell’s (or 
substitute any vendor name here) 
obsession with Microsoft; Micro- 
soft’s obsession with market con- 
trol; Oracle’s obsession with any- 
thing it’s not currently involved in. 
And the list goes on. Shouldn’t user 
satisfaction be the No. 1 concern? 

At this point, I have to ask: Do 
we really need more incentives to 
garage IT projects? Because the 
vendor community seems to be 


working overtime trying to create 


them. Even crash dummies are 
smarter than that. D 
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Next Step 
In Affordable 
Security 


S MORE PEOPLE gain 

access to your IT infra- 

structure, there’s grow- 
ing demand to secure that ac- 


cess at a reasonable cost. 

IP security — or IPsec — is a great 
security method for client/server situ- 
ations. It was built to support packet 
exchange at the IP layer and is pretty 
common in virtual private networks. 
For IPsec to work, both the sending 
and receiving ends have to share a 
public key using management proto- 
cols that authenticate the sender while 
letting the receiver get a public key. 

IPsec for VPNs makes sense, but 
what about for your intranet and the 
Internet? 

The proliferation 
of Web-based tech- 
nology means peo- 
ple can have access 
from home, on the 
road and from a vari- 
ety of mobile de- 
vices. Most IT de- 
partments would be 
loathe to give every- 
one an IPsec client. 

They don’t really 

want to start sup- 

porting and tweaking IPsec for every- 
one’s machines. 

Instead, there’s a move to adopt SSL, 
the Secure Sockets Layer protocol, for 
transmitting documents via the Inter- 
net using public-key encryption. It 
provides the necessary level of securi- 
ty for basic functions such as Web- 
based e-mail, limited client/server ap- 
plications (Microsoft’s Exchange and 
Outlook, as well as Lotus Notes) and 
some intranet functions. And when 
combined with Nokia’s new Secure 
Access System, the flexibility of SSL 
makes it possible to open up safe new 
ways of accessing corporate intranets 
and the Internet. 

Consider four devices in which this 
type of security appliance can be ef- 
fective in providing SSL protection: a 
company-issued laptop, a home ma- 
chine, a handheld, and a public kiosk 
or public wireless network. Each can 
be managed to limit file upload and 
download capability, depending on the 
circumstances. 
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Emerging Standards: Easing the 
Complexity of Managing Storage 
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Enterprise-class features and 
aggressive price points, so you 
can lower the cost of reliability. 


WHY NOT CUT COSTS 
WITHOUT CUTTING CORNERS? 


commodity features. So why not get premium features for the 
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same price? With a line of servers that are as affordable as 
they are powerful, Sun is out to prove once again that you can 


lower costs and complexity without compromising quality. 


It's simple, really: When you buy commodity hardware, you get 


Sun has an entire family of servers built to deliver enterprise- 
level performance and reliability at highly competitive prices. 
Which means that for the cost of an alarmingly mediocre Wintel 
SUN FIRE V880 box, you can get an ultra-reliable Sun server ready to take on your 
most mission-critical tasks. From CRM applications to e-mail 
and Web serving. With this kind of bang for the buck, it’s no wonder 


Sun has remained the UNIX® server leader every year since 1998* 


To find out more about how Sun servers can deliver 
state-of-the-art technology at state-of-the-economy prices, UN. 
visit SUN.COM/WHYNOT microsystems 
We make the net work. 


“Source: IDC’s Worldwide Quarterly Server Tracker, February 2003. Based on revenue and shipment growth, CY2002, all OSs. 
©2003 Sun Microsystems, Inc. All rights reserved. Sun, Sun Microsystems, the Sun logo, Sun Fire and Sun StorEdge are trademarks or registered trademarks of Sun Microsystems, Inc. in the United States 
and other countries. UNIX is a registered trademark in the United States and other countries, exclusively licensed through X/Open Company, Ltd. 





SPECIAL ADVERTISING SUPPLEMENT 


Introducing the SNIA Storage Management Initiative 
A letter from SNIA Board Chairperson Sheila Childs 


While IT professionals understand the value that new storage technologies can contribute to ensuring the 
success of their business, they continue to struggle with issues of manageability, interoperability and cost that 
keep them from fully realizing that value. Out of necessity, the world of storage management is changing 

As the volume and value of data increase, so do the requirements to manage this data in a cost-effective way. 
IT professionals are no longer responsible merely for assuring the availability of enough capacity and the recov 
ery of data from backup tapes. Administrators are now expected to enable access to information based on any 
number of factors — ranging from an application's need for data according to time-variable criteria, to remote 
replication to accommodate the repurposing of data, to recovery of an environment destroyed by severe circum 
stances. Storage hardware and software vendors are anxious to deliver value-added functionality to assist with 
these business objectives, but without tools to perform appropriate management of the storage infrastructure, 
customers are struggling with how to achieve their objectives 

As you'll see in the following pages, the Storage Networking Industry Association (SNIA) understands this 
problem and is addressing the needs of IT professionals with respect to the management of their storage envi 
ronment. Good work is under way to deliver standards that will enable vendors to bring interoperable hard 
ware and software products to market in ways that take advantage of lower-cost development practices. This 
will enable the development of better management tools focused on high-level functionality 

The Storage Management Initiative (SMI) detailed in this White Paper pulls together an extraordinary 
number of resources led by dedicated teams of engineers, product managers, marketing representatives and oth 
ers, who are singularly focused on delivering a unified management interface for storage. As you read through 
these pages, you will see details of the SMI Specification (based on CIM/WBEM), you will learn about interop 
erability conformance test initiatives and you will read about strong education and support programs under 
way to deliver on this groundbreaking effort 

While change is difficult and success doesn't happen overnight, the efforts of the individuals and companies 
involved in the Storage Management Initiative are an almost certain guarantee of success. I hope these pages 
will generate for you the same level of excitement I feel when I envision the changes to come, as the SNIA SMI 
works toward the end result of interoperable, manageable storage networks delivered at a total cost of owner 


ship that companies can live with 
We are pleased to present to you the SNIA Storage Management Initiative 


Warm Regards, 


- Ane 
Mek (filtr 
Sheila Childs 


Chairperson, SNIA Board of Directors 
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Emerging Standards: Easing the 
Complexity of Managing Storage 


Shelter from the Storm 


he growth of information technology we are 


experiencing is a storm requiring IT end 


users and vendors alike to seek shelter in 


order to continue productive business ven 


tures. The rapid rise of data storage brought on by busi 


ness expansion and the growth of the Internet caused a 


need for storage services that was unimaginable in the 


early 1990s, when storage systems were directly connected 


to servers as “peripherals” and most eyes were focused on 


the need for more computing power. 


The development of the storage 
area network to solve the explosive 
growth of data and the need to turn 
data into information through careful 
management have resulted in a tech 
nology that offers more efficient use 
of storage resources. Through a 
SAN, IT departments can offer 
shared connectivity between 
servers and their applications to mul 
tiple storage arrays, which makes for 
better utilization of resources 
through a superior access model. 

While the storage network 
addresses the utilization problem, 
the interconnectivity of devices is 
limited by the ability of devices to 
interoperate with each other and, 


more importantly, to be managed effi 


ciently. In today’s world, each device 
requires its own management appli 
cation, because until recently there 
has been limited cooperation 
between device vendors (all of which 
claim to be in the software manage 
ment business) looking for a piece of 


the management marketplace 


The not-so-perfect storm 

Today, system management con 
sists of management “stovepipes” — 
processor complex management, net 
work management, database manage 
ment, application management and 
storage management — that are min 
imally integrated or not integrated at 
all. IT departments must train admin 
istrators who are skilled in multiple 


independent management applica 
tions and, worse, in the interrelation 
ships of these components. 

Efficiently managing a multi-ven 
dor storage network as an integrated 
fabric is a key concern for IT admin 
istrators and integrators alike. Today, 
the management of a multi-vendor 
storage network requires the use of a 
suite of uncoordinated applications 
from multiple vendors. And these 
applications are limited in the 
required functionality, distribution, 
security and reliability to ensure 
increased business efficiency. 

Attempts to solve this interoper 
ability problem through the private 
exchange of management application 
programming interfaces (APIs) have 
met with limited success for vendors 
and, moreover, have brought unpre 
dictable results to customers trying 
to select management applications 
from multiple suppliers 

The SAN promises to make the 
use of storage resources more effi 
cient, but ultimately, the high cost of 
management deters end users from 
aggressively embracing storage net 


working technology. 


Users speak out 
Ironically, in the rough seas of 


interoperable storage management 
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confusion, vendors have represented 
the SAN as a cloud in order to 
abstract the interconnectivity from 
the storage devices and servers the 
storage network served. Perhaps the 
cloud signaled bad weather ahead, or 
perhaps because of early attempts by 
end users to integrate SAN intercon 
nectivity by themselves, SAN adop 
tion rates have been commensurate 
with the ability of the SAN to address 
management issues. 

“Users are voting with their 
requests for proposals [RFPs],” says 
John Webster, Senior Analyst and 
Founder of the Data Mobility Group. 
“IT administrators are now requir 
ing standard interoperability among 
storage management applications as 
a solution to the management prob 
lem, and are doing so through the 
RFP process.” 

“Providing storage for the various 
business initiatives we support is an 
ongoing challenge, since typically we 
don’t get much lead time on the 
requests for additional capacity,” says 
Jerome Wendt, storage administrator 
for First Data Resources in Omaha. 
“Implementing a SAN to move the 
storage capacity more easily makes 
sense, yet the tools we have today to 
manage the complexity are lacking, 
causing us to proceed cautiously 
With better device and applications 
integration, we could put more of our 
storage on the SAN.” 


The SNIA organizes storm relief 


In mid-2002, the Storage 


Networking Industry Association 
(SNIA) launched the Storage 
Management Initiative (SMI) to cre 


ate and foster the adoption of a high 
ly functional open interface — a stan 
dard for the management of storage 
networks. The SMI includes activi 
ties in technical, educational, mar 
keting, conference and interoperabil 
ity groups within the SNIA. The 
SMI's goal is to deliver open storage 
network management interface tech 
nology in the form of a Storage 
Management Specification. SNIA 
members are developing this SMI 
Specification (SMI-S) based on 
CIM/WBEM technologies — the 
Common Information Model (CIM) 
and Web-Based Enterprise 
Management (WBEM) standards 
developed by the Distributed 
Management Task Force (DMTF). 
The SML-S will standardize the com 
munication between storage devices 
and management applications in the 


storage network. 


SMLS is the foundation for the 
development of products by SNIA 
member companies that offer end 
user customers more efficient use of 
their storage resources through bet 
ter interoperability of storage net 
work components. This will simplify 
the complexity of storage manage 
ment for customers and help them 
achieve service-level targets. 

“Implementation of the Storage 
Management Initiative Specification 
as a unified management standard 
has the potential to radically change 
the way the world looks at managing 
computer storage technologies,” says 
Sheila Childs, Chairperson, SNIA 
Board of Directors. “Storage hard 
ware and software vendors will be 
able to focus more on the value 
added functionality they'd like to 
deliver their customers, and cus 
tomers will be able to recognize 
lower TCO derived from better inter 
operability and manageability of 
storage networks. The SNIA mem 
bership has come together in ways 
not seen before to deliver on both the 
short- and long-term goals estab 
lished as part of the SMI. I believe 
that due to its significant resources 
and member commitment, the SNIA 
is uniquely positioned to execute on 
this very important initiative.” 

With the SMI clearly the number 
one priority for the SNIA in 2003, the 
association has received broad partic 
ipation from member companies that 
have made major investments of 
resources, time and money. 
Development has been aggressive; the 
technical workgroups at SNIA pre 
sented Version 1.0 of SMI-S in April 
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for public review and are on schedule 
to make a final standard specification 
available to be implemented by ven 
dors by the beginning of the third 
quarter of this year 

‘The SNIA SMI Specification will 
restructure the way the entire stor 
age industry approaches storage 
management,” says Roger Reich, who 
serves as Chairman of the SNIA SMI 
Committee. “Component developers 
will no longer have to ‘push’ their 
unique interface functiona 
applications developers. Moreover 
management application developers 


will no longer hav ) integrate 


5 g 
incompatible feature poor interfaces 
into their products. Instead, the 
industry will be better able to con 

ct pee 
centrate on developing higher order 


features that have maximum valuc 


| Figure 1. 


SPECIAL ADVERTISING SUPPLEMENT 


ddressing the management con 


cerns for end users 
The SNIA goal for SMLS is that 
ul new storage networking products 
(arrays, switches, extenders, appli 
inces, libraries, management soft 
ware, etc.) from SNIA member com 
panies that produce network storage 
clients and servers will use the SMI 
interface for management alter 2005 
The SNIA is developing education 
ind compliance testing programs as 
well as “plugfests” to assist SNIA 
members in creating products that 
the specification 
Through the Storage Management 
Forum (SME), which is the outward 
facing organization coordinating all 
of the marketing activities for the 


SMI, a number of these activities are 


ng delivered, such as collecting 


[Tend users’ requirements and pro 
viding information to the public in 
support of members that use this 
standard in their products. In parallel 
with the specification development 
idditional important SMF-spon 

sored activities test and support the 
rich functionality of the SMIS stan 

dardization effort 

ICTP. To avoid potenti ul ambigu 

ities that arise from writing to a spec 

ification, the Interoperability 
Contormance Testing Program 
(ICTP) provides SMI-S developers a 
verification program to validate 
efforts by storage vendors to develop 
products based on the specification 
standard. The ability of products to 
pass ICTP conformance testing will 
issure users that vendors are serious 


tbout management interoperability 


SNIA SMI-S V1.0 CIM-SAN-2 Tested Interoperability Matrix 
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MLS is the unifying factor between the objects 


that must be managed in a storage network and 


the tools that manage them. SMI-S is based on 
the Common Information Model (CIM) and Web- 
Based Enterprise Management (WBEM) standards. 


SMLS provides the following new features: 


@ A single management trans- 
port. Within the WBEM architec- 
ture, the CIM-XML over HTTP pro 
tocol was selected for this transport 
in SML-S. 

@A complete, unified and 
rigidly specified object model. 
SMI-S defines “profiles” and 
“recipes” within the CIM that 
enable a management client to uti 
lize a component vendor's imple 
mentation of the standard 

@ Consistent use of durable 
names. As a storage network config- 
uration evolves and is reconfigured, 
key resources like disk volumes 
must be uniquely and consistently 
identified over time. 

@ Documented client imple- 
mentation considerations. SMI-S 
provides client developers informa 
tion for traversing CIM classes with 
in a device/subsystem and between 
devices/subsystems, so complex 
topologies can be mapped. 

@ An automated discovery sys- 
tem. SMI-S-compliant products, 
when introduced in a storage net- 
work, will automatically announce 
their presence and capabilities. 

@ Resource locking. Compliant 


management applications from mul 

tiple vendors can exist in the same 
storage network and share resources 
via a lock manager. 


Opportunities created by SMI-S 

In addition to simplifying devel 
opment and testing, SMI-S creates 
additional usage modes for manag- 
ing network storage, creating new 
opportunities for the storage and 
software industry segments: 

@ Management application 
coexistence. By establishing a com 
plete systems architecture for man 
agement, SMI-S provides for the 
ability to have multiple management 
applications running in the same 
storage network. 

@ Accommodation of legacy 
systems. Recognizing that full 
adoption will take multiple product 
generations, SMI-S has mechanisms 
for standards-based management of 
legacy devices. Devices and subsys- 
tems with proprietary interfaces can 
be integrated into an SMI-S net- 
work using software agents or CIM 
object managers. 

@ Multi-layer resource man- 
agement. Often in large storage net- 


works, similar services are provided 
at multiple levels. By instituting a 
common standard, SMI-S lets man 
agement applications intelligently 
combine these similar capabilities 

® Policy-based management. 
Because they must be applicable 
across entire classes of devices, 
SMLS object models are higher-level 
abstractions than models developed 
for individual components 
Common abstractions let developers 
implement policy-based manage 
ment for entire storage networks. 

@ Interconnect independence. 
The interface specifies a protocol 
stack consisting of CIM-XML 
(object descriptions and manage 
ment actions) over HTTP (session), 
over TCP (transport), and over IP 
(interconnect). The ubiquity of the 
lower layers of this stack makes it 
possible to manage components 
using in-band communications, out 
of-band communications or both. 

@ Seamless integration. SMI-S 
includes procedures for device dis 
covery, installation and initializa- 
tion, making feasible the dynamic 
construction of large heterogeneous 
storage networks. 

@ Secure centralized adminis- 
tration. The WBEM transport spec 
ified by SMI-S provides for encryp- 
tion and authentication 

e@ Flexible administration 
authority. The CIM on which SMI-S 
is based is designed for future addi- 
tion of Access Control Lists, which 
will allow assignment of manage- 
ment privileges to individuals or 
groups that require them. 
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SPECIAL ADVERTISING SUPPLEMENT 


Clearing skies for storage 
management applications 


Crc 


Figure 2. 
The SMI-S management application environment 
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CIM-SAN. The CIM-SAN-2 
Developers Demonstration is a six 
month “laboratory” program t 
brings storage device manufacturers 
and application management vendors 
together in a series of face-to-face 
plugfests to test the implementation 
of the SML-S interface in a real-world 

AN fabric (Figu 1). The 
CIM/WBEM-managed CIM-SAN is 
the first permanent, pen” muiti 
vendor develoy t and demonstra 
tion env nent for accelerating the 
implementation of SMI-S into prod 
ucts. CIM-SAN is a broad program 
designed 

@ Ease the implementation of 
SMLS in 


@ Reduce multi-vendor integra 


dor products. 


tion costs (a large multi-vendor stor 
age network is maintained at the 
SNIA Technology Center and avail 
able over the Internet for manage 
ment application developers). 

@ Build seamless interoperability 
between products 

@ Provide recognition to compa 
nies that contribute to the SMI. 

@ Forward the development of 
the CIM/WBEM-based SML-S. 


The SNIA SMI-S 


SML- is intended to be the unify 
ing factor between the objects that 
must be managed in a storage net 
work and the tools used to manage 
them. The goal of the Storage 
Management Initiative is to move the 
storage industry to universal adop 
tion of SML-S so that ultimately, all 
storage network components will be 
implemented with native self 


describing interfaces. 





With all components presenting a 
common interface, implementing 
management functionality will 
become simpler, less costly 

robust for companies that 

oping SAN management and storage 
resource management applications. 
Additionally, stable management 
interfaces will encourage direct man 
agement of network storage 
resources by applications such as file 


systems and database managers. 


Clearing skies for storage 
management applications 

When broadly adopted, SMI-S 
will solve storage management prob 
lems by replacing today’s multiple 
disparate managed object models, 
protocols and transports with com 
mon models for each object class and 


a common protocol for management 


Figure 2. 


Object Model Mapping 


Constructs 


| 
Application and 
Infrastructure 


interactions. Management applica 
tion developers will be able to sup 
port devices from multiple vendors 
quickly and relia because they 
“look alike.” Development and test 
ing costs will drop; time to market 
will be shorter; end-user satisfaction 
will increase; and ultimately, prof 
itability will rise. 

Figure 2 illustrates the manage 
ment application environment 
enabled by the SMI-S usin 
CIM/WBEM technology. As the fig 
ure suggests, the SMI-S management 
application environment consists of a 
single object-oriented model for each 
type of component in a storage net 
work. These models define common 
attributes and behavior for standard 
features. Management actions are 
communicated using a single man 


agement protocol and transport that 


The SMI-$ management application environment 


Vendor Unique Features 


Object Oriented 





Source: SNIA 
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can be carried on any of several inter 
connects. Included are a uniform set 
of discovery, security and durable 
naming services. To enable multiple 
management applications to coexist 
in a network, SML-S includes a lock 
manager that can be used to prevent 
applications’ actions from interfering 
with each other. 

The models and protocols that 
make up the SMI-S environment are 
platform-independent, which means 
applications can be developed for any 
platform, and enabling applications 
running on different platforms can 
interoperate. CIM/WBEM technolo 
gy uses a powerful human- and 
machine-readable language called the 
managed object format (MOF) to 
precisely specify object models 
Compilers can be developed to read 
MOF files and automatically generate 
data type definitions, interface stubs 
and GUI constructs to be inserted 
into management applications 

SML-S object models are extensi 
ble. This enables easy addition of new 
devices and functionality to the mod 
els and allows vendor-unique exten 


sions for added-value functionality. 


A trusted solution 

The result of this effort by SNIA 
member companies will be the devel 
opment of products that offer cus 
tomers more efficient use of their 
storage resources through better 
interoperability. This will ease the 
complexity of storage management 
for end users and their customers and 
will help them achieve service-level 
targets 


Figure 3 shows the results of a 


Interoperability is a key 
concern of end users 
and integrators alike. 
IT shops want to treat 

storage networks as 
integration backbones 

that insulate them 

from vendor lock-in. 


recent storage management require 
ments survey of Fortune 1000 com 
panies by InfoPro. 

Clearly, interoperability among 
storage network components sup 
plied by multiple vendors is a key 


concern of end users and integrators. 


Users want to treat storage networks 
as multi-vendor integration back 
bones that insulate them from vendor 
lock-in, supplier failure and unrea 
sonable pricing practices 

SML-S supplies what customers 
need: a foundation for management 
interoperability, high value and cost 
savings. The specification delivers 
the ability for any conforming devices 
in the storage network to be discov 
ered and controlled regardless of 
manufacturer. Applications utilizing 
SMLS will manage a larger pool of 
devices supplied by virtually all 
industry leaders 

The results of this endeavor offer 
the ability to control the accelerating 
costs of storage management by 
reducing the need to have separate 
management products for each 


device in the SAN. Interoperability 








Figure 3. 
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will change the focus of day-to-day 
operations from struggling with 
issues of device connectivity to focus 
ing on higher order management, 


such as policy-based productivity 


Accelerating the pace 
of SMI-S development 

Critics of “the standards 
approach’ to solving storage interface 
problems point to the slow pace at 
which most standards organizations 
move and the ambiguity that is some 
times created when developing a 
specification standard. The early 
SNIA effort — 
CIM/WBEM technology to storage 


applying 


— may have fallen subject to this 
criticism, but with SMI, the SNIA is 
changing the face of the storage 
industry 

One factor contributing to the 
intensity of the SMI-S development 
effort is the CIM-SAN demonstra 
tion. The aggressive CIM-SAN devel 
opment demonstration has evolved 
from a once-a-year event held at 
Storage Networking World in the 
late ‘90s to a reference architecture 
that is installed at the SNIA 
Technology Center and is driven by 
four face-to-face plugfests held dur 
ing the first six months of 2003, 
including the public demonstration 
that takes place at Storage 
Networking World Conferences 

CIM-SAN-2 is a heterogeneous 
multi-million-dollar SAN fabric of 
devices supplied by industry vendors 
consisting of products that are 
instrumented using the latest code 
fragments (profiles) of the specifica 


tion under development. Storage 


management vendors bring applica 
tions (clients) that consume 
CIM/WBEM providers. Lessons 
learned are then immediately fun 
neled into the specification develop 
ment process 

CIM-SAN-1 was held at the 
October 2002 Storage Networking 
World 


August and September at which ven 


following two plugfests in 


dors demonstrated the ability to 


report on array and switch configu 


rations, and to report on tape library 
and media information. 

At the April 2003 Storage 
Networking World conference, ven 
dors showed the next stage of devel 
opment, which included all CIM 
SAN-1 functionality, plus the active 
management functions associated 
with the following 

@ Indications: a way for manage 
ment applications to become aware 
of changes in the operating state of 


devices, such as problems with a 


component, temperature changes, 
alarms, and so forth. 

@ Array-volume creation: the cre 
ation of logical volumes in an array 
and making it available to a host 

@ Array LUN masking: control 
ling the visibility of logical volumes 
to hosts (a form of security) 

@ Array snapshot and mirror 
control: creating, splitting and syn 
chronizing snapshots and mirrors. 

@ Fabric topology and zoning 
discovery: discovering the path 
between hosts, switches and arrays, 
as well as reporting on and configur 


Ing zones. 


Conclusion: A promising forecast 
for storage management 


With a common interface, the 


management of network storage will 
become simpler and less costly. 
Ultimately, faced with reduced costs 
for management, end users will be 
able to adopt storage networking 
technology faster and build larger, 
more powerful solutions to address 
their business needs 

The storm is not over, but storage 
vendors are working together to 
address the storage device and man 
agement interoperability problem 
with a common standard. The SNIA 
SMI-S is a forecast that calmer 
weather is ahead, and that no matter 
how hard the wind blows, end users 
will have the tools to master their 
growth with confidence that storage 
infrastructure concerns can become 
subordinate to running a profitable 
business. That is good news in times 
in which clear skies are sometimes 


hard to predict. 
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For example, upload capability 
could be restricted to machines that 
have current virus controls installed. 
Different levels of access for each lo- 
cation for a single user can be defined 
and automatically set using SSL. The 
security appliance, sitting behind the 
firewall, is rules-based, so different 
user groups can be configured for ac- 
cess. In addition, it’s possible to ratch- 
~ et up from 64-bit encryption to 128-bit, 
depending on the sensitivity of the 
documents or pages. Data isn’t cached 
on the browser, so all the data remains 
within your security fortress. And 
there’s a fairly easy interface with 
LDAP directories, making it possible 
to overlay access rules on top of exist- 
ing rights and permissions. 

Sure, IPsec is still necessary for 
power users accessing multiple plat- 
forms. But consider that, with no 
client to deploy and no VPN, SSL 
costs less, and because you're using 
standards-based technology, mainte- 
nance headaches are reduced. I'd say 
SSL looks good enough to comple- 
ment IPsec. It’s one answer to secur- 
ing access at a reasonable cost. D 


MICHAEL GARTENBERG 


Microsoft 
Can't Stifle 
Linux 


REATING an atmos- 

phere that fosters com- 

petition is part of Mi- 
crosoft’s culture. Indeed, the 


company has long champi- 
oned an us-vs.-them mentality that 
serves to deflect attention from its of- 
ten dominant position in the market- 
place while keeping internal energy 
high and preventing complacency. 

Competitors that Microsoft has 
identified and rallied successfully 
against include AOL, Apple, IBM, Lo- 
tus, Borland, Novell, 3Com and, of 
course, Netscape. Recently, CEO Steve 
Balimer, in a 5,600-word “leaked” 
memo, positioned Linux as Microsoft’s 
enemy du jour. Is Linux really a threat 
to Microsoft? And how should busi- 
ness users react to the news that Mi- 
crosoft paid SCO to settle what could 
have been a potential lawsuit over Lin- 
ux intellectual property? 

In the four main areas that concern 
business users — handhelds and em- 
bedded computing, desktops, low- and 
midrange servers, and high-end serv- 





ers — Microsoft is under 
no immediate threat from 
Linux. 

Microsoft controls the 
desktop and faces no chal- 
lenges in that market. 

While Microsoft isn’t 
dominant in the handheld 
market, it has more to fear 
from Palm and Symbian 
than it does from Linux. 

On the high end, both 
Microsoft and Linux face 
competition from tradition- 
al Unix systems. Linux is a 
threat to Microsoft only in 
the low- and midrange 


server market, where the technology 
is proven and more easily substi- 
tutable. But this alone doesn’t repre- 
sent enough of a threat to warrant the 
attention Microsoft has given Linux. 
The SCO claims, however, cast a 
shadow over the entire open-source 
model of licensing software, and this 
model of free software, adopted by 
business users, is what Microsoft fears 
far more than Linux. Microsoft has 


Who’s to Blame 


HE IT MEGAPROJECTS that 

crashed and burned during the 
1990s often weren't proposed by IT 
departments and were accepted by 
them only with the greatest reluc- 
tance [“Credibility Challenged,” 
QuickLink 38473]. Not untypically, 
a vendor or consultant would make 
a proposal for an IT project to 
someone one or two levels above IT 
who lacked the experience to prop- 
erly evaluate the proposal. If the 
head of IT expressed reservations, 
he was simply told to shut up. A top 
manager who permits himself to be- 
come mesmerized by the prospect 
of becoming known as a patron of 
the technological arts and who is 
thereby induced to sponsor ill-con- 
ceived and badly managed IT proj- 
ects is the person who should be 
searching for ways to repair his 
damaged credibility. 
Loy W. Fitz 


Boston, loyfitz@yahoo.com 


Linux Will Prevail 


N HER EDITORIAL “Shields Up, 

Linux” [QuickLink 38649], Patri- 
cia Keefe said the real question is 
what the Linux camp will do. Well, in 
the unlikely event that SCO’s lawsuit 


OPINION 





long maintained that the 
GNU General Public Li- 
cense model is flawed, and 
so commercial software li- 
censes are the best way to 
deliver software that offers 
the most customer benefit. 
By settling with SCO, 
Microsoft deals with a for- 
mer adversary and heads 
off another potential law- 
suit. At the same time, 
even if not intentionally, 
Microsoft helps to further 
the fear, uncertainly and 
doubt that surrounds 
open-source software and 


Linux in particular. 


Business users, however, need to 
carefully look at the events. Microsoft 
hasn’t publicly stated that SCO’s 
claims are valid, and SCO has yet to 
prove in court its claims regarding 
ownership of the Unix code that might 
be contained in Linux. Those claims 
are being challenged by Novell and 
others. The ensuing uncertainty over 
who owns the code has resulted in 


| 
| 
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| FUD about the future of the open- 

| source operating system and an op- 

| portunity for Microsoft to extol the 

| virtues of its license models. Business 
users need to be cautious about strate- 

| gic Linux adoption from a legal per- 

| spective, but they shouldn't allow the 

| legal actions to hamper longer-range 
technology architecture issues. 

The bottom line for the industry 

| and users is that Linux will coexist 

with Windows for many businesses. 

| The value proposition of using Linux 

| as a low-end Web or e-mail server, as 
well as for other traditional tasks such 
as file and print serving, is too alluring 
for many IT organizations. Likewise, 


| the dominance of Windows at the 


ats 


has any substance, | can see the 
Linux developer community's re- 
sponse already. Before the case can 
even reach trial, they will scour every 
line of Linux code and replace the 
offending ones with new implemen- 
tations of the public specifications 
that are not bound by any intellectu- 
al property claims. Whatever hap- 


| pens, Linux will end up the winner. 


Robert Honore 
Port-of-Spain, Trinidad and 
Tobago, robert@digi-data.com 


Misguided Move 


| BELIEVE SCO’S MOVE is a mis- 
guided attempt on the part of its 
management to twist IBM's arm un- 
til it unwillingly makes a buyout offer 
- and | believe that they have gross- 


| ly miscalculated [“Users Outraged 


as SCO Stakes Linux Legal Claim,” 
QuickLink 38514]. The U.S. govern- 
ment once took on IBM in a legal 
duel that had to be abandoned - 
because the U.S. government ran 
out of money before IBM did! Does 
anyone really believe that SCO 
would be a more formidable foe 
than the U.S. government? | would 
also add, having been a Unix kernel 
programmer since 1973, that SCO's 
claim that Linux is genetically de- 





rived from Unix is not defensible. 





SCO will have its day in court, but it 
will be a short day. 

Akmal Khan 

Vice president of engineering, 
Linuxcare Inc., San Francisco 


Extinct Possibility 
OFTWARE DEVELOPMENT in 
the U.S. extinct by mid-2006? 


| So predicts Jon C. Piot in the May 


19 issue of Computerworld [“The 
Next Chapter,” QuickLink 38055). 
This revelation comes just in time. | 
just received my renewal notice for 
your magazine. It looks like | won't 
have to renew. That's a good thing, 
because | will need the money. 
With 10.2 million people out of work 
over the next three years, it will be 
nearly impossible to find a job. 
James Bell 

Charlotte, N.C. 


Legislative Worries 


HANKS TO PATRICIA KEEFE for 

yet another interesting editorial 
[“IT Superheroes,” QuickLink 
38949]. However, besides HIPAA, 
a discussion of legislation affecting 
and controlling IT operations should 
also include UCITA, DMCA, Super 
DMCA, NETAct, Title 17 of the U.S. 
Code and Sarbanes-Oxley. | know: 


desktop isn’t likely to change. Once 
| again, IT shops will find that they are 
| best served by ignoring the hype and 
FUD on both sides. Instead, pursue a 
proper suitability-to-task model. D 


| WANT OUR OPINION? 


More columnists and links to archives of previous 
columns are on our Web site 
| www.computerworld.com/columns 


Lots to cover and little space. 
|  Weatthe International Associa- 
tion of Information Technology As- 
set Managers have found that the 
vast majority of IT personnel react 
| to legislation in a distressingly 
head-in-the-ground manner, al- 
though management trusts IT to be 
| aware of these issues and to act 
} upon them. Only through the con- 
stant prodding of writers such as 
Keefe will we begin to move for- 
ward in educating the IT community 
regarding the need to pay attention 
to legislation and act to protect the 
enterprise. 
Alan Plastow 
President, IAITAM, 
Akron, Ohio, 
plastow@iaitam.org 


COMPUTERWORLD welcomes 
| comments from its readers. Letters 
will be edited for brevity and clarity. 
They should be addressed to Jamie 
Eckle, letters editor, Computerworld, 
PO Box 9171, 500 Old Connecticut 
Path, Framingham, Mass. 01701. 
Fax: (508) 879-4843. 
E-mail: letters@computerworld.com. 
Include an address and phone num- 
ber for immediate verification. 

For more letters on these and 


other topics, go to 
| www.computerworld.com/letters 
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IT Security Confronts 

New Legal Liabilities 

New privacy iaws and security 
threats prompt Mathias Thurman to 
double-check his company’s liability 
policy, hoping to save himself from 
headaches later. Page 38 


The Right Skills 
At the Right Time 


Workforce management software 
combines the science of predicting 
call center volume and the art of 
scheduling staffers with the right 
skills for the times they’ll be 
needed the most. Page 36 
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Business-process 
management 
software aims to 
make better use of 
underperforming 
enterprise systems. 


By Robert L. 
Scheier 


ERE’S GOOD NEWS for 
CIOs looking to do 
more with less. Busi- 
ness-process manage- 
ment (BPM) software | 
can pay for itself 
within a year or two by linking expen- 
sive legacy applications to new, more 
streamlined workflows, customers say. 
With BPM, “you can get to the 
point where you can see, on a 
second-by-second basis, what’s 
happening in your business and 
where in the business are the holdups 
and where process improvement [is 
needed],” says Dean Pipes, an integra- 
tion architect at The Toro Co. in 
Bloomington, Minn. The yard equip- 
ment manufacturer uses a BPM system | 
based on Vitria Technology Inc.’s Busi- | 
ness Ware to pool its purchases from 
vendors to negotiate volume discounts. | 
Shippers are turning to BPM “to 
lower costs and to leverage the invest- 
ment they’ve made in their ERP sys- 


ANCE DOVENBARGER 


-AN PIPES says to start slow when integrating BPM into the business. 


Tools 
FR Tough 
Times 





Hg 
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OPINION 
Coping With Infoglut 
Companies are being buried in 
unstructured data, mostly from 
the Internet. There’s an urgent 
need for technologies that can 
help manage and use that data, 
says Tommy Peterson. Page 40 


tems,” says Ted Barnicoat, CIO at 
trucking company Trimac Corp. in 
Calgary, Alberta. He expects a return 
on his $500,000 BPM investment with- 
in two years through reduced paper- 
work and additional business from 
customers who find Trimac’s BPM- 
based ordering system easier to use 
than those of competitors. 

BPM requires a flexible application 
architecture that can accommodate 
new applications as needs change. It 
also requires a tool with the right mix 
of modeling, code-generation, work- 
flow and monitoring capabilities. Vet- 
erans recommend that companies start 
slowly, allowing enough time to under- 
stand existing workflows and train 
workers to use BPM systems. 

BPM is “friendlier” than implemen- 
tations of other major software pack- 
ages such as ERP, says analyst Eric 
Austvold at Boston-based AMR 
Research Inc. If a business 
process needs to be changed 
after it’s deployed, he says, “you 
don’t have to go back to a huge IT or- 
ganization to rewrite a whole bunch of 
code. It’s usually minor tweaks to the 
process model.” 


BPM Basics 


BPM software allows customers to 
graphically map business processes, 
such as issuing or collecting a bill; 
transform that visual map into an ap- 
plication or set of applications; and 
manage the electronic workflow to 
monitor that the work gets done and 
allow changes to the workflow. The 
software is offered by a variety of ven- 
dors, ranging from makers of tradition- 
al enterprise application integration 
software to business application sup- 
pliers and “pure-play” BPM vendors. 
Reston, Va.-based NII Holdings (for- 
merly Nextel International) two years 
ago began to integrate applications 
such as finance and billing to eliminate 
the costly and error-prone practice of 
entering data multiple times. The 
wireless communications company 
chose Plano, Texas-based Fuego Inc.’s 
namesake BPM package based on the 
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Sample BPM Vendors 


ae ia WEB SITE 


Apriso Corp. | FlexNet - Provides very detailed process information for industrial/ 


: manufacturing customers, company says. 


www.apriso.com 





ex 


Fuego Inc. | Fuego - Has about 30 production customers; requires fewer services to 
P ] ' implement than competitors’ products, company claims. 





HandySoft Corp. BizFlow Version 8 - Latest enhancements include support for IBM 


V ' DB2 and integrated adapters for SAP, J.D. Edwards, PeopleSoft and 


‘ Ariba products. 


www.fuego.com 
www.handysoft.com 





iBM WebSphere Business Integration - Most recent update aims to make 


Armonk NY 


\.Y. + modeling easier; includes new integration, monitoring capabilities. 





Lombardi Software inc. 


TeamWorks - Most recent upgrade includes improved Web services 


Austin » support; company received $13 million in funding in February. 


www.ibm.com 


www.lombardisoftware.com 








Microsoft Corp. | 


3, Wai 


BizTalk Server 2002 - More modeling and business-process automa- 
tion being added to core integration capabilities. 


www.microsoft.com 





Pegasystems Inc. 


Via 


PegaRules Process Commander - Built on a business rules engine, 
product provides process and practice rules in an integrated package, 


according to company. 


www.pega.com 





M 
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Web services. 


www.staffware.com 





Unisys Corp. 


Rell. F 


Business Blueprinting - Designed to help industries in various vertical 
markets develop high-level business-process models. 


WWwW.unisys.com 





Vitria Technology Inc. 


ounnyvale, U 


strength of its business-process model- 
ing and its connectivity to legacy ap- 
plications, says Jorge Perez, vice presi- 
dent of IT and CIO at NII. 

As for Trimac, it chose Vitria’s Busi- 
nessWare over Microsoft Corp.’s Biz- 
Talk Server because of Sunnyvale, 
Calif.-based Vitria’s expertise with the 
chemical industry’s version of XML, 
says Barnicoat. Ironically, customer 
use of the older electronic data inter- 
change (EDI) format grew instead, and 
Trimac plans to use Vitria to handle all 
of its EDI transactions. 

Like other customers, Pipes says 
simple application integration is be- 
coming a commodity in the BPM 
world. The actual reason Toro chose 
Vitria was for its business-process 
automation, reporting and workflow 
capabilities. 


A New Way of Thinking 


Thinking first about the business and 
not about technology can be a chal- 
lenge. When Perez started to improve 
a payments collection process in Brazil, 
users immediately began talking about 
problems with the current collections 
application. After training users in 
business-process modeling, Perez had 





Staffware PLC Staffware Process Suite - Latest version includes greater support for 


BusinessWare - Standards-based integration platform supports BPM, 
{. + business analysis and monitoring, and other functions, says Vitria. 


them map the collections process on 
charts that soon covered all four walls 
of a room. Next, they identified gaps 
and used Fuego to model an improved 
workflow that has led to a “dramatic” 
improvement in the process, he says. 

NII also used Fuego in Mexico to im- 
prove the process of establishing ser- 
vice for new customers, reducing the 
rate of “churn” (customers switching 
to other carriers) “very substantially,” 
Perez says. 

“Getting managers across the divi- 
sions to agree on what information is 
important at what point is a challenge, 
because each business has a different 
set of criteria by which they rate their 
success,” Pipes explains. For example, 
he says, “in winter, we want to know 
about snow throwers, and in summer, 
we want to know about lawn care 
products.” 

Veterans also recommend starting 
with relatively straightforward, quick- 
payback projects until IT and business 
managers get used to BPM. Toro first 
used Business Ware to integrate and 
automate workflow between its Ariba 
procurement system and its SAP R/3 
ERP system, says Pipes. It now auto- 
mates the process by which stores buy 





www.vitria.com 


spare parts from Toro. Pipes plans to 
tackle the biggest and most important 
work — integration with the distribu- 
tors who buy finished products from 
Toro — only after completely under- 
standing how to improve that process. 
Trimac’s BPM project, which began 
in 2001, linked its dispatch systems 
with its customers’ order entry systems 
to improve customer service. Barni- 
coat estimates that the BPM system 
will pay for itself within two years. It 
not only saves customers about $20 
per order in handling charges, but it 
also allows Trimac to spend less time 


| resolving invoice questions, has re- 


duced its accounts receivable and has 
resulted in more business from cus- 
tomers using the system. The BPM sys- 
tem even allows Trimac to run a virtu- 
al shipping desk to accept customer 
orders and arrange for shipment. 


integration and Training 
Integration may not be a showstopper 
for BPM projects, but it can be a 
headache. It took Perez’s staff about a 
year and a half of working with ven- 
dors to build links to legacy systems 
that allow Fuego to use the business 
logic (such as rules for credit checks) 
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built into those applications. Perez also 
had to increase server capacity by 50% 
to give users the appropriate response 
time. 

Because different users might need 


| different types of information, some 


form of data warehouse is often neces- 
sary for BPM, says Pipes. “You can’t 
expect all of your information to be 
available” from legacy systems in the 
form and at the time required by the 
improved workflow, he adds. 

Although Trimac struggled a bit in- 
tegrating Vitria with its EDI transac- 
tion flow, “what took us a heck of a lot 
longer was changing our dispatch sys- 
tem to accept electronic transactions,” 
says Barnicoat. Dispatchers used to re- 
ceiving orders by phone and fax need- 
ed visual and audio alarms to alert 
them to new orders arriving eletroni- 
cally, Barnicoat says. Developers had 
to include different alarms to tell dis- 
patchers about the last-minute shipping 
changes common in the trucking indus- 
try and to redesign screens so the dis- 
patchers could find the changes easily. 

Intensive coaching is vital — as are 
reassurances that the BPM project isn’t 
simply a way to cut jobs, says John 
Antaki, managing partner at Matrix5 
Consulting LLC, a Houston-based con- 
sulting firm. If what end users see “is a 
lot of consultants running around, they 
get very insecure,” he says. 

Before extending a BPM system to 
customers or suppliers, Barnicoat sug- 
gests signing a contract governing is- 
sues such as testing, how to handle 
system crashes and notification of soft- 
ware upgrades that could crash a part- 
ner’s system. 

Once users see how BPM can im- 
prove the business, they often demand 
more detailed and more timely infor- 
mation, says Pipes. One way to avoid 


endless additional requests is to “define 


success from the get-go,” says Antaki. 
For example, a BPM project Antaki 
worked on at Shell Oil Co. had a goal 
of reducing the cost of the monthly 
financial close by at least 10%. 

But the need to keep tweaking is also 
good news, says Pipes. “If you try to hit 
100%, you limit the best part of the 
process, which is that it can feed back 
on itself and improve itself.” D 





Scheier is a freelance writer in Boylston, 
Mass. He can be reached at rscheier@ 
charter.net. 


CLOSER LOOK 


For a detailed description of a BPM deployment, 
visit our Web site: 


QuickLink 39199 
www.computerworld.com 








IT PORTFOLIO MANAGEMENT: WHERE TO BEGIN? 


7 

Portfolio Management is a hot 
topic. But for many IT organizations, 
it’s hard to know how to start. With 
hundreds of projects to manage and 


2 pacificedge 


GETTING STARTED... 


Adopting IT Portfolio Management is easier than you might think — 
and the returns come quickly 


Portfolio Management is now 


undergoing the same widespread 


IT PORTFOLIO MANAGEMENT 


resources already stretched, where will 


the capacity come from to 
implement a new layer of 
management? And _ be- 
sides, we already use 
Project Management — 
isn't this just the same 
thing with a fancy dash- 
board on the front? 
While the 


Portfolio 


terms 
Management 
and Project Management 
are often used in the same 
sentence, these two disci- 
plines differ significantly 
— and make very different 
contributions to the IT 
organization. Simply put, 
Project Management is 
tactical, focused on com- 
pleting IT projects on 
time and within budget. 
Portfolio Management is 
strategic — deciding which 
investments to pursue in 
the first place. 

Project Management 
has long been accepted as 
essential in any IT organi- 
zation. As IT evolves from 
merely “supporting the 
to “being the 
business,” with 


business” 
and 


“Within three 
months of 
implementing 
Project Office” from 
Pacific Edge we were 
seeing results. Our 
managers and 
supervisors were 
able to easily see 
reports for 
milestones and 
resource planning 
at different views 
and for the first time 
we could look 
forward, anticipate 
deadlines, and look 
at projects from a 


higher level.” 


: Jim Parker 


Energy Northwest 


| acceptance. 
| 
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STEP BY STEP 


So how does one go 
about implementing IT 
Portfolio 
Ask any CIO who’s using 
the technique and the 


Management? 


answer would seem to be 
“jt hardly matters, as long 
as you do start.” The wel- 
come news is that a prag- 
matic, phased approach is 
not only possible, but 
actually preferable — pro- 
vided the solution chosen 
is flexible enough to allow 
for changes along the way. 

The following are the 
key phases in IT Portfolio 
Management: 
* Build the IT Asset 
Portfolio 

First, build a picture of 
the organization’s IT 
assets and projects — both 
existing and potential — 
using consistent metrics 
and descriptions, and in a 
standardized format so 
they can be easily com- 
pared. 

For many organiza- 
tions, merely creating the 
inventory of IT projects 


increasing pressure on resources, the 
need to align IT activities with corpo- 
rate objectives grows. As a result, IT 


delivers bottom-line benefits itself. It 
| is not uncommon to discover numer- 
ous projects duplicating efforts, or 


attacking related problems without 
exploiting the potential for synergy. 
Significant savings almost always 
result. 

At the same time, an IT Project 
Office is established to manage all 


projects — intake and triage — at a 
portfolio level. With the portfolio in 
place, individual investments can be 


grouped into three classes (as defined 


CONTINUES ON NEXT PAGE 


ae 


How do your plans 
and progress in adopting 
IT Portfolio Management 

compare to your peers? 


According to META Group, Inc., the usage of IT Portfolio 


Management among Global 2000 ClOs is such that: 


¥ 50% are using it as a communication vehicle, 


¥ 25% are using it to manage within a portfolio view, 


and 


AS Oey Oogire mmr are rece eases 


META continues, “Our research shows that fewer than 3% of 
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practice of managing business and IT as one’set of portfolios.” 





CONTINUED FROM PREVIOUS PAGE 
RRS, tT LEE eR PNT ETRE 
by Louis Boyle, Senior Vice President 
of Executive Directions at META 
Group, Inc.’): 

Run-the-business investments 
involve keeping the business opera- 
tional. Spending in this category pro- 
vides mission- and business-critical 
services for the front office (sales order 
entry, customer service) and the back 
office (payroll, accounting, HR). 
Grow-the-business investments cover 
expanding the organization’s scope of 
products and services. Investments 
here might include upgrading soft- 
ware, adding incremental capacity, or 
developing staff member skills though 
additional training and other efforts. 
Transform-the-business investments 
involve project-based spending that 
creates new IT services to broaden an 
enterprise’s reach to enter new, 





How do you decide 


And can you be certain you’re making the right choices 


Project A. 


“CIOs that embrace 
IT portfolio 
management have 
exemplary records 
of continuous 
IT efficiency 
improvement, with 
some enterprises 
able to reduce costs 
by up to 30%.” 


: META Group, Inc. 





untapped markets. Sample transform 
investments include new business ven- 
tures, mergers and acquisitions, new 
products, new geographies, major new 
business initiatives that typically 
require adding new application pack- 
ages and business process outsourcing. 
* Getting the Right Mix 

This Run/Grow/Transform divi- 
sion must of course take into account 
the maturity of the IT organization 
and its openness to risk. What one 
company might consider a “grow the 
business” project could be classed as a 
“run the business” project by another. 
A well designed Portfolio Manage- 
ment solution is flexible enough to 
accommodate such variations, and to 
support changes in category defini- 
tions as the organization evolves and 
matures. 

Similarly, determining the appro- 


Three out of four organizations are 
wasting at least part of their IT budg- 
et because they don’t know which ini- 
tiatives matter. They’re doing things 
that have little real value to the busi- 
ness. Duplicating efforts across differ- 
ent teams. Spending time and money 
on initiatives selected by guesswork, 


incomplete data or politics. 


With IT Portfolio Management 
solutions from Pacific Edge - a 
proven mix of technology, processes 
and services — you can be sure you're 
making the right choices. Our unique 
solution helps you make informed, 
objective comparisons. And smarter, 


better decisions. 





priate mix of “run, “grow” and “trans- 
form” investments is a business deci- 
sion that each enterprise makes for 
itself, and which will be constantly 
changing in response to business 
strategies and market forces. Typical 
portfolio mixes’ are: 

* Run: 65%-85% 

* Grow: 10%-25% 

+ Transform: 5%-10% 

However, setting a portfolio mix 
that’s appropriate for the organiza- 
tion, and managing toward it, is more 
important than worrying about pre- 
cise percentage allocations. 

RESULTS COME QUICKLY 

Since IT Portfolio Management is 
best implemented step-by-step, it 
does not create a new burden for 
already stretched IT resources. In 
many cases, the funding and resources 
freed up in the inventory phase alone 





which one to choose? 


to quickly impact your bottom line? 


In about 45 days we'll help you select 
and prioritize the IT investments that 
align with your corporate goals, and 


offer maximum business benefit. 


Visit www.pacificedge.com/cw or 
call 425-897-8800. And start making 
IT decisions that make bottom-line 


sense. 


One customer saved $8.7 million 
using IT Portfolio Management. 


Visit www.pacificedge.com/cw 
for a FREE WHITE PAPER 
that tells how. 


 pacificedge 


SOFTWARE 


Portfolio Management for Smarter Business” 


Project B. 


AMR Research: “As much as 75% of IT organizations have little visibility of their entire project portfolio and have, at best, chaotic and non-repeatable processes in place 


deliver significant savings — creating 
new room for growth. 

And the results come quickly. A 
large oilfield services company saved 
$8.7 million dollars by eliminating 
investment duplication, and improv- 
ing the way projects are managed — 
within nine months of implementing 
a Portfolio Management solution 
from Pacific Edge Software. 

Another convert to IT Portfolio 
Management — and also a Pacific Edge 
customer — Ohio-based Mercy Health 
Partners, cut IT costs by $4 million. 





And that’s just for starters. James 
Albin, VP and CIO says that IT 
Portfolio Management has enabled 
Mercy Health to effectively utilize lim- 
ited resources, better manage cus- 
tomer expectations, and manage high 
quality projects. 

It’s experiences like these that 
explain the opinion with which we 


© pacificedge 


began: “you just have to get started.” 
Source: META Group, Inc., Portfolio Management 
for CIOs 

©2003 META Group, Inc., Stamford, CT - USA, 
+1 (203) 973-6700, metagroup.com 


For more information on IT Portfolio Management 
and its relevance to senior management, visit 


WWW.PACIFICEDGE.COM/WEBCAST 
for complimentary Webcasts with industry analysts 
and subject matter experts. 


| 
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RUSSELL/MELLON ANALYTICAL SERVICES 


Russell/Mellon Takes Control 
of their IT Portfolio 


are tied to meeting the development 
needs of the company. 
Increased internal communication: 


uct lines based on their contribution 
to corporate business objectives vs. 


more effectively manage IT spending | 
and to allow effective planning and | 


decision-making based on business | cost and, makes a final recommenda- 


ene? 


Russell/Mellon Analytical Services, 
a leading global provider of perform- 
ance measurement services, realized 
the need for improved insight and 
control of its rapidly expanding IT 
activities. The company established a 
Project Management Office and uti- 
lized Pacific Edge Software to imple- 
ment formal project management 
administration processes and develop 
a comprehensive Enterprise Portfolio 
Management solution. 

SITUATION 

When Tammy Reuter was hired as 
Manager of Strategic Initiatives in 
2001, Russell/Mellon had recently 
been formed through the merger of 
the data divisions of long-established 
Frank Russell Company and Mellon 
Financial Corporation. The new com- 
pany had seen its IT budget grow dra- 
matically in three years, and Reuter 
was charged with establishing a 
Project Management Office to 
improve control and oversight of 
some 100 to 135 projects active at any 
one time. 

The IT department had been man- 
aging this large portfolio of projects 
using a combination of spreadsheets 
to inventory the project portfolio and 
a Microsoft Access database for time 
reporting. This approach was hard to 
scale, had very limited ability for 
effective forecasting. The process also 
did not include an concise method to 
track the capitalization of software 
development. 

SOLUTION 

Reuter and the senior management 
team realized that with the growth of 
the project portfolio that a more 
robust solution was essential to help 


drivers. She selected 
Pacific Edge to provide a 
complete Enterprise 
Portfolio Management 
solution. 
Russell/Mellon decid- 
ed to take a phased 
approach to implemen- 
tation. The first task was 
to identify which were 
the ‘real’ projects, and 
get them into one data- 
base. This was made 
much simpler by the 
preformatted template 
that was provided by 
Pacific Edge, which 
Reuter easily adapted to 
the company’s specific 
needs. 
The 
helped Russell/Mellon 


process also 
identify how incomplete 


their existing project 
data was, so the next 
step was to gather the 
missing information. 


With that in place, 


“We're light-years ahead. 
The combination of the tool, 
the management group and 

the processes have been 
instrumental in helping to 
align projects with where we 
are going as a company. As 
we have become more com- 
fortable with the processes, 
we have continuously 
improved them, so we now 
are in a better position to 
make more sophisticated 
assessments of the rewards, 
costs and risks of each initia- 
tive. The Pacific Edge solu- 
tion has helped us in this 
evolution, adapting to our 
needs and supporting us.” 


: Tammy Reuter 
Manager of Strategic 
Initiatives 


tion to senior manage- 
ment. This prioritiza- 
tion process, and alloca- 
tion of resources and 
budget is done quarterly 
for a six-month rolling 
timeframe. 
RESULTS 

Enterprise Portfolio 
Management has helped 
Russell/Mellon enhance 
control of its IT project 
portfolio. With an accu- 
rate picture of how ini- 
tiatives relate to business 
priorities, decisions can 
be made based on cor- 
porate needs, and the 
department is in a better 
position to prioritize its 
efforts — or turn away 
misaligned initiatives 

Some of the specific 
benefits Russell/Mellon 
has experienced 
through the implemen- 
tation of Pacific Edge’s 
solution include: 





Reuter and the senior management 
team could start actively managing 
their portfolio of projects. 

Before the establishment of the 
Project Management Office, Russell/ 
Mellon lacked a formal process for 
initiating projects. Reuter created a 
project request template, scheduled 
regular meetings with the CEO, CFO 
and directors to review requests based 
on the business case for each initia- 
tive. More recently, a formal Invest- 
has been 
established, comprised of representa- 


ment Decision Council 
tives from sales, clients services, oper- 
management and 
product management. This team 
ranks new initiatives across all prod- 


ations, project 





Cost evaluation: Enterprise Portfolio 
Russell/ 
Mellon significantly manage a recent 
evaluation of its IT spending. It is now 


Management has_ helped 


much clearer how much is being spent 
and what it is being spent on. And 
Russell/Mellon is now going further: 
tying travel dollars to specific projects. 
Improved management information: 
Enterprise Portfolio Management 
helps Russell/Mellon 
monitor how product development, 


management 


IT, and project management activities 


ses 





Having more complete data on proj- 
ects has helped facilitate more timely 
and accurate communication between 
product development, project man- 
agement, IT and Senior Management 
on development priorities and status. 
This helps them focus on doing devel- 
opment work that is better tied to our 
company strategy, which pleases both 
internal customers and management. 

And with improved communication 
comes increased understanding of the 
importance of planning. The Project 
Management Office and the processes 
it has implemented involve the busi- 
ness directors in the decision-making 
process. “Now, even when a project 
gets turned down, people understand 
why. So they are more accepting,” says 
Reuter. 

The Pacific Edge Enterprise 
Portfolio Management solution has 
helped Russell/Mellon transform the 
way it manages its IT efforts. And the 
company plans to continue extending 
the benefits. Soon, Product Managers, 
Projects Managers and Resource 
Managers will start managing project 
data, allocating resources, forecasting 
tasks and entering data themselves 
using Pacific Edge Software solutions. 
Further down the line, Russell/Mellon 
intends to use the system to gather 
additional strategic information to 
help in the analysis of achieved bene- 
fits from IT and product profitability. 
“We've come a long way in a short 
time,” says Reuter, “and Enterprise 
Portfolio Management can help take 
us much farther.” 





www.computerworld.com 


TECHNOLOGY 


ital Rights 


ement 


DEFINITION 


Digital rights management (DRM) refers to the con- 
trol and protection of digital intellectual property 
(content), including documents, images, video and 
audio. DRM limits what a user can do with that 
content even when he has possession of it. 


BY RUSSELL KAY 
ROTECTING valu- 
able information 
from misuse, theft 
or misappropriation 
is a minefield of 
conflicting opinions, expecta- 
tions, laws and technologies. 
As new storage and distribu- 
tion channels become available 
— DVD and peer-to-peer file- 
sharing networks, for instance 
— traditional rules and physi- 
cal limitations no longer apply. 
To see why digital rights man- 
agement (DRM) is so con- 
tentious, let’s examine the 
three words individually. 
Digital 
When information was 
entirely analog in na- 
ture, distribution and 
publishing required 
physical vehicles: printing it 
on paper, recording it in vinyl 
grooves or on magnetic tape, 
and exposing it on photo- 
graphic film or paper. 
Producing these vehicles 
is relatively expensive. While 
people could always make 
analog duplicates, doing so 
was generally complex, slow 
and expensive, and resulted in 
degraded quality. These tech- 
nical and economic limita- 
tions protected publishers 
against unauthorized distribu- 
tion. If you wanted a second 
copy, it was simplest and often 
cheapest just to buy another. 
Digital technology changed 
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everything. Today, most infor- 
mation, from newspaper sto- 
ries to motion pictures, is 
available in digital form. It’s 
quick and simple to make ab- 
solutely perfect copies of digi- 
tal data. Such copying costs 
virtually nothing and doesn’t 
alter the original or make it 
unavailable. 

Digital theft made its first 
widescale appearance in soft- 
ware in the 1970s, as the fledg- 
ling Micro-Soft Corp. found 
that people were making pa- 
per-tape copies of its Basic 
program without paying for 
it. Software piracy is 
still a problem, and 
Microsoft is one of 
the more active play- 
ers fighting it. 

For digital informa- 
tion, the Internet elim- 
inates the need to sell and 
move physical objects, such 
as books or magazines, floppy 
disks, cassette tapes or CDs. 
With high-speed networks and 
widely accessible broadband, 
we can send digital content 
anywhere in the world almost 
instantaneously and at virtu- 
ally no cost. 


Rights 

Copyright, patent and trade 
secret laws give certain privi- 
leges to the holders of such 
rights, letting them share, sell 
or withhold information for a 
period of time. Tradition and 
legislation define what users 





can do with information they 
buy. For example, if I buy a 
book or a music recording, I 
can read or listen to it, pass it 
along to a friend, make a copy 
or use the original in another 
machine (such as a car play- 
er). I can buy a used book or 
CD at a reduced price. A li- 
brary can lend its books to 
thousands. 

There are rights I don’t have. 
I can’t make changes and sell 
the revised work as my own. I 
can’t make and sell unmodified 
copies. I can’t incorporate 
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pieces of such works in some- 
thing I produce without per- 
mission. I can’t charge people 
admission to watch my DVDs. 
Digital content creates 
rights that didn’t exist for ana- 
log products. For example, I 
can buy an aerial photograph 
of a particular location, or I 
can buy a satellite photograph 
in digital form. That satellite 
image is limited in the size of 


the smallest detail it can show, | 


but it’s packaged with another 


image I can view at higher res- 


olution, if I’m willing to pay a 
little more. 


Management 

We can enforce policies far 
more Draconian and restric- 
tive than previously possible. 
If I buy an e-book, for exam- 
ple, I might find these limita 
tions: I can only read it ona 
single machine; I can’t make 


| backup copies; I can’t lend 


it to a friend; I can only read 
the book a certain number 
of times, or within a specific 


time interval, before it expires; 


and I can’t print it out. 

In the wake of Napster and 
declining music CD sales, sev- 
eral publishers have launched 
commercial online music dis- 
tribution services. For a 
monthly fee, you can down- 
load and listen to a certain 
number of songs from their 
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catalogs. But there’s often a 


catch: Miss a monthly payment 


and you can’t listen to any of 
the songs you previously paid 
for and downloaded. Or maybe 
you can only listen to a song 
for a designated period of 
time. You can’t burn the song 
to a CD or copy it to a hand- 
held MP3 player. None of these 
restrictions apply if you just 
buy the physical CD. 
Microsoft has included 
DRM technology in its new 
Windows Server 2003, Office 
2003 productivity suite and an 
add-on for Internet Explorer. 
This will let users designate 
who can open a Word docu- 
ment or Outlook e-mail mes- 


| sage and whether they can 


print, copy or forward it. B 


Kay is a Computerworld 
contributing writer in Worces- 
ter, Mass. Contact him at 
russkay@charter.net. 


| Are there technologies or issues you'd like 


to learn about in QuickStudy? Send your 
id ckstudy@ : 


QuickStudies, go online to 
Qcomputerworld.com/quickstudies 


LANGUAGE AND LINKS 


For more information about XRML, the 
language of DRM and links to online 
resources, visit our Web site: 


QuickLink 39044 
www.computerworld.com 
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Workforce management mixes 
science and artto meet the needs 
of today’s multimedia contact 
centers. By Kym Gilhooley 





OW DO You sTAayY on schedule 
when you run 23 call centers 
across the U.S. and handle 40 
million contacts from 6.3 mil- 
lion customers annually? Just ask Cox 
Communications Inc., the country’s 
fourth-largest cable services provider, 
whose 4,000 contact center agents 
serve customers not only by phone, 
but also across a range of channels, in- 
cluding e-mail, chat, Web collaboration 
and self-service. To handle the com- 
plex job of getting the right mix of 
skills in the right seats at the right 
time, Cox relies on a workforce man- 
agement suite from San Jose-based As- 
pect Communications Corp. 
“There’s an art and science to work- 
force management. It’s about predict- 


THE 





ing call volumes and then scheduling 
the appropriate staff at the right times 
to handle those customer contacts ef- 
fectively,” says Denny Campbell, re- 
source operations manager at Cox’s 
largest call center, which is in San 
Diego. The Atlanta-based company’s 
challenge is one faced by contact cen- 
ters everywhere as they struggle to 
maximize their most costly resource — 
people. 

According to Gartner Inc., 71% of 
call center costs are personnel-related. 
Managers must make sure they have 
the right agents available to ensure op- 
timal service levels, and they must do 
so without over- or understaffing. Fur- 
thermore, they must increasingly 
schedule agents across a range of real- 
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time and deferred contact channels, 
because customers demand multichan- 
nel access. They must also retain these 
agents in a time when call center turn- 
over is at an alarming high, with some 
estimates placing it 35% annually. 

Enter workforce management tech- 
nology. Though not new on the scene, 
workforce management is generating 
keen interest, as contact centers recog- 
nize that delivering premium customer 
service depends largely on the employ- 
ees delivering it. Workforce manage- 
ment suites typically comprise fore- 
casting, scheduling, budgeting and re- 
porting modules, though vendors are 
increasingly moving toward what ana- 
lysts are dubbing “workforce optimiza- 
tion” by integrating components such 
as performance monitoring, analytics, 
training and incentive programs. 

By utilizing forecasting techniques, 
contact centers can schedule optimal 
service levels based on agent availabil- 
ity and skills. Through integration with 
automatic call distributor (ACD) sys- 
tems and multimedia contact channels, 
the technology routes customers to the 
appropriate agents, no matter how 
they made contact with the organiza- 

' tion. And by enabling agents to input 








their own schedule preferences, man- 
agers can increase employee morale 
and retention rates. All this means 
higher productivity and, ultimately, im- 
proved customer satisfaction, accord- 
ing to proponents. 


Fast ROI 


Another argument for workforce man- 
agement technologies is that, unlike 
some other types of customer-related 
software, workforce management sys- 
tems are producing a fairly quick re- 
turns on investments for companies 
that have implemented them, says 
Wendy Close, CRM research director 
at Stamford, Conn.-based Gartner. 
Respondents to a recent survey by 
Gartner cited the following improve- 
ments following workforce manage- 
ment implementations: a 45%-90% re- 
duction in scheduling times, a 10%-13% 
increase in service levels, a 10%-13% 
decrease in payroll costs and a 3% de- 
crease in call abandonment rates. In 
addition, 87% said deployment had 
lowered their personnel costs, and 
98% said it had improved efficiency. 
“Many companies with call centers 
have all the components of CRM in 
place, but workforce management is 
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where the rubber meets the road. It’s a 
no-brainer,” says Close. “The place to 
draw the line in the sand is if you’ve 
got multimedia support channels and 
more than 100 agents with a range of 
skill sets.” 

Although workforce management 
technologies are often overlooked at 
budget time, they can have the biggest 
impact in the shortest amount of time 
in the call center, according to Joanie 
Rufo, research director at AMR Re- 
search Inc. in Boston. Also, many 
workforce management suites provide 
key integration with call management 
applications and can easily be incorpo- 
rated into a larger customer-service 
infrastructure, she says. 

But companies won't realize this 
ROI without overcoming a number of 
challenges, chiefly cultural ones, says 
Rufo. Schedulers are initially reluctant 
to trust forecasts and may create re- 
dundant systems. Conversely, they may 
end up adhering too strictly to auto- 
mated schedules and not be flexible 
enough to meet employee needs. 

On the technology side, workforce 
management offerings have enjoyed 
solid integration with ACD systems for 
some time, but integration with other 
channels has been slower in coming. 


Moving to Multimedia 

Los Angeles-based PeopleSupport Inc. 
saw the lack of multimedia integration 
firsthand when it searched for a work- 
force management suite in early 2000, 
says CIO Abby Hossein. Founded in 
1998 to deliver outsourced online cus- 
tomer care services, primarily to dot- 
coms, PeopleSupport signed up early 
Internet stars such as eToys Inc. and 
Real.com, whose business models re- 
lied on driving support from more 
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expensive phone-based channels to 
less expensive real-time and deferred 
channels. It also set up offshore call 
center operations in the Philippines. 

PeopleSupport grew quickly, and it 
became apparent that its spreadsheet- 
based scheduling and forecasting ap- 
proach wouldn’t be able to handle the 
complexities of scheduling more than 
1,000 agents as it was forced to add 
more phone-based support across mul- 
tiple time zones, says Hossein. 

“When we started to look at work- 
force management, we looked at tradi- 
tional players, but at the time, they had 
primarily integration with voice, not 
with Web collaboration or e-mail 
tools,” says Hossein. The company 
chose CenterForce Technologies Inc.’s 
system, which was integrated with an 
e-mail package, and partnered with 
Bethesda, Md.-based CenterForce to 
build a solution that encompassed 
voice and chat. 

“We wanted an enterprise solution 
for centralized forecasting, planning 
and scheduling,” Hossein says. People- 
Support now has that, and its work- 
force management suite runs on a 
Windows 2000 server in Los Angeles. 


Manual Methods Fall Short 


An inability to meet forecasting and 
scheduling needs using manual! meth- 
ods likewise led Timberline Software 
Corp. to purchase workforce manage- 
ment software. The breadth of the 
product line at the supplier of financial 
and operations software for the con- 
struction and real estate industries re- 
quired that technical personnel sup- 
port numerous applications, and cus- 


Contact Center 
Workforce 
Expenses 


On average, 71% of contact center 
costs are personnel-related, accord- 
ing to new research by Gartner Inc. 
Here’s the breakdown of those 
personnel-related expenses: 


Benefits: 12.3% Incentives: 2.2% 
Overtime: 2.2% | 


ad 
80.1% 


Ongoing Training: 2% Initial training: 1.1% 
Percentages don't add up to 100 due to rounding 
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Workforce Management Software Adoption 


Companies with 
75 agents or fewer 


e————— Currently have 


Companies with 
more than 75 agents 


Percentages don't add up to 100 due to rounding 





RCE: GARTNER INC.. 2003 
tomer service was suffering as a result. 

“We weren't delivering the levels of 
service we needed to customers, and 
we had to re-engineer that,” says Mark 
Brannan, operations director at the 
company, which in 1999 deployed 
workforce products from Blue Pump 
kin Software Inc. in Sunnyvale, Calif. 

“Our support reps had to know all 
our applications, and what that ended 
up doing was establishing a limited 
amount of expertise on all applica- 
tions,” he says. “We wanted to add 
skills-based routing to get customers 
to the proper person.” 

Routing calls to the representatives 
with the proper skills created unfore- 
seen forecasting and scheduling com- 
plexities at Beaverton, Ore.-based Tim- 
berline, making it impossible to do 
scheduling manually. 

“In the past, we could use simple 
calculations — we based [schedules] 
on one big block of calls and one block 
of agents,” says Brannan. With the new 
service model, the company forecasts 


| and schedules for 12 to 20 different 


queues, depending on customer needs, 
agent availability and skill levels. 

The software also enables Timber- 
line to plan for product rollouts and 
determine future hiring plans, among 
other things. “By implementing Blue 


Pumpkin with the skills-based environ- | 
ment, we found that our hiring plan for | 


the upcoming year [2000] was too ag- 
gressive and that we needed to hire 30 
fewer people than we initially 
thought,” says Brannan. That discovery 
saved $1.4 million that year, he says. 
Indeed, the ability to identify hiring 
parameters and budgeting needs 
through forecasting is one of the 
biggest benefits of workforce manage- 
ment software, say users. “A critical 
output [of workforce management] is 
knowing when to hire new classes and 
when they need to hit the floor,” says 
Cox’s Campbell. “With a long-range 


| forecast, we can look at seasonality 


and customer-base growth and predict 


| hiring.” 


As with any technology, workforce 


| management software presents certain 


challenges that can hinder success. 
Cultural issues often pose the biggest 


| hurdles, says users. 


“With this tool, it requires an entire 


| staff to buy in, a discipline that often 

| does not exist in call centers,” says 

| PeopleSupport’s Hossein. “If anyone 

| thinks that buying this tool and in- 
stalling it is going to solve their prob- 

| lem, they’re wrong. You need a work- 

| force management team committed to 

| enforcing policies and procedures and 


ensuring that agents adhere to breaks 
and other activities.” 
Accurate forecasting is another is- 


| sue, says Gartner’s Close. “There can 
| be a lot of complexity in collecting his- 
| torical data for forecasting. You might 


be forecasting for multiple sites and 
multiple skill sets. And for contact cen- 
ters, you're not just forecasting call 


| volume, but [also] e-mail, Web chat 


and even walk-ins,” she says. 
Schedule forecasting can mean the 
difference between keeping and losing 


| customers, says Hossein. But for his 


company, it was a risk that had to be 
taken. “Because we're in the contact 
center and CRM business, workforce 
management means the difference be- 


| tween making money and losing it,” he 
| says. “We must constantly balance 


| workforce efficiency with high service 


levels.” D 





| Gilhooley is a freelance writer in Fal- 
| mouth, Maine. You can reach her at 
| kymg@maine.rr.com. 


_ BIG BROTHER OR BIG HELPER? 





| Workforce management leads to Big Brother concerns, 


but the technology can also help workers. Read more 


QuickLink 39019 
www.computerworld.com 
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Confronts 


New _ Liabilities 


Upcoming legislation and changing threats 
prompt our cautious security manager to 
double-check the corporate liability policy. 


By Mathias Thurman 


ORD of upcoming 

security-related 

legislation and a re- 

cent security inci- 
dent at my company have 
prompted me to investigate 
cyberinsurance. I had to re- 
view how well my organiza- 
tion is positioned to deal with 
a lawsuit or the need to file a 
claim as a result of a cyberse- 
curity incident. 

Like many security 
professionals, I have 
been so focused on 
keeping up with the 
fast-changing IT se- 
curity landscape that 
I haven’t thought 
much about how those 
changes affect potential in- 
surance-related issues at 
my company. 

For example, in California, 
Senate Bill 1386 will become 
law next month. It will require 
companies to disclose to con- 
sumers any event in which 
data pertaining to them was 
possibly compromised as a re- 
sult of a security breach. Un- 
der SB 1386, not only Califor- 
nia companies will be required 
to notify customers of security 
breaches; any company that 
does business in California will 
have to disclose security 
breaches to California cus- 
tomers. So if your business is 
located in Boston or New York 
and you have customers in 
California, you will have to 
comply with this law. 


Possible Loopholes 

I’m told that there are several 
loopholes in this bill that give 
us some flexibility and protec- 
tion. For example, the law will 
apply to instances when a cus- 
tomer’s data is “reasonably 
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believed” to have been com- 
promised. In my experience, 
any time that phrase is used, 
there is room for interpreta- 
tion. The term reasonable 
seems to take on different in- 
terpretations depending on 
whom you talk to. Even so, de- 
fending interpretations favor- 
able to our company in court 
could require an army of 
lawyers and lots of 
time and money. 
Another loophole 
involves a possible 
exception if the 
stolen customer 
data was stored in 
encrypted form. My 
company keeps all of its cus- 


| tomer data in an encrypted 
| Oracle database. 


Of course, the bill doesn’t 
specify the type of encryption. 


| It could be weak or strong. So 


the question becomes this: If a 
hacker is able to compromise 
a data store and decrypt the 
data, does that require disclo- 
sure? And how do you know 


whether the hacker did in fact 


decrypt it? 

There’s also a provision that 
says a company doesn’t have 
to disclose a breach if a law 
enforcement investigation or 


Defending. . . our 
company in court 
could require an 
army of lawyers 
and lots of time 
and money. 





inquiry is under way. Such in- 
vestigations can last for years. 

Besides situations involving 
the new California law, there 
are other instances when we 
might want to file an insur- 
ance claim. 

Recently, an employee, prior 
to leaving the company, creat- 
ed several new accounts on a 
huge, publicly accessible FTP 
server that serviced some 400 
user accounts. He also config- 
ured one of the accounts to 
have administrative privileges 
and then created a trust rela- 
tionship between the FTP 
server and another server. The 
latter had direct access to a 
database server housing cus- 
tomer credit card data. By 
simply logging into the FTP 
server, he could have accessed 
the database server and 
copied the sensitive data. 

Fortunately, we discovered 
the breach shortly after the 
employee left during a routine 
audit that included a review of 
administrative privileges. Our 
investigation showed that no 
customer data had been com- 
promised, but the incident 
gave us enough of a scare to 
take a new look into the issue 
of cyberinsurance. 


No Publicity, Please 


Even if we could catch the 
perpetrator, my company, like 
others, would be disinclined 
to try to prosecute and recov- 
er damages. I had wanted my 
company to take legal action 
against the former employee, 
but management didn’t want 
the publicity that would have 
resulted. And even if we had 


| prosecuted, it would have 


been hard to prove that this 
individual actually conducted 
the unauthorized activity. Yes, 
his account was used, but we 
would have had to show that 
he performed the keystrokes 
to gain unauthorized access to 
the backdoor accounts. 





When a user has adminis- 
trative-level privileges on a 
system, he has the ability to 


| make my life miserable. In this 


case, he could have deleted 
the entire database, causing 
significant downtime and seri- 
ous monetary losses. 

In fact, had he done so, we 
would have lost a lot of rev- 
enue during the time it would 
have taken to rebuild or re- 
store the data. Our e-com- 
merce site generates more 
than $1 billion per year in on- 
line transactions. We do repli- 
cate the site to minimize 
downtime, but this trusted ad- 
ministrator could have taken 
down both sites if he wanted 
to. Depending on the extent of 
the damage, it could have tak- 
en our IT team more than six 
hours to resolve the problem. 
That could add up to a poten- 
tial seven-figure loss. To re- 


| coup losses in such situations, 


it might be prudent to be able 
to file an insurance claim. 
I made some inquiries to 


our legal department and, for- 


tunately, we do have a cyber- 


| security clause in our policy 
| that covers loss as a result of 


dishonest or criminal acts by 
our employees. In this sce- 
nario, even though the em- 
ployee was terminated before 
accessing our infrastructure, 
the fact that he was an em- 
ployee when he created a back 
door into our system meant 
we would have been covered. 
Now we just have to worry 
about the potential saboteurs 
we don’t employ. D 


WHAT DO YOU THINK? = 


This week's journal is written by a real 
security manager, “Mathias Thurman,” 
whose name and employer have been 
disguised for obvious reasons. Contact him 
at mathias_thurman@yahoo.com, or join the 
discussion in our forum: QuickLink a1590 


To find a complete archive of our 
Security Manager's Journals, go online to 
@ computerworld.com/secjournal 
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Snort 2 


Intrusion Detection 


ment the book with a visit to 
www.snort.org. 
~ Mathias Thurman 


UnityOne Blocks 
P2P Programs 
Austin-based TippingPoint 
Technologies Inc. has en- 
hanced its UnityOne intrusion- 
prevention appliances with a 
new feature that lets compa- 
nies block users from sharing 
files using peer-to-peer appli- 
cations like Kazaa. The new 
feature can distinguish traffic 
by client or server type, IP 
address and application type. 


Fortinet Bolsters 
Firewail Appliance 
Fortinet inc. in Santa Clara, 


Calif., has rolled out new soft- 
ware for its FortiGate firewall 


are designed to stop over 30 of 
the most prevalent attacks, in- 
cluding denial-of-service and 
buffer overflow exploits. 
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You trust that the ravages of 400 years have not weakened the base. 





You trust the granite bases to support the 24-foot high Corinthian columns. 


4 3 You trust nothing more than eight columns.to sustain a 15,000-ton dome above your head. 





Siar L lama VOlO Rimes -er lama eeleim ole me liaie Mart lege adel c rs 





VeriSign delivers critical infrastructure services that make a 
Internet and telecommunication networks more intelligent, 
mine and secure. Every CEVA CUS ums mu emeL 
global businesses and millions of people connect, communicate 
and transact. While our services are wide ranging, our goal is 
simple: to make you feel as confident in the digital world as you 


do in the physical one. To find out more, visit wwwverisign.com 
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Western Digital 
Issues SATA Drives 


Western Digital Corp. announced 
a new line of Serial Advanced 
Technology Attachment (SATA) 
hard drives with capacities up to 
2506GB and 8MB buffers. The 
7,200-rpm Caviar Special Edition 
drives feature new SecureCon- 
nect SATA cables, which are 
stronger than first-generation 
SATA cables, according to the 
Lake Forest, Calif.-based compa- 
ny. The drives, available in sizes 
of 120, 160, 200 and 250GB, are 
shipping this month. They are 
backed by three-year warranties. 


Wireless MAN 
Standard Selected 


The standards group Worldwide 
Interoperability Microwave Ac- 
cess Inc. (WiMAX) has selected a 
version of orthogonal frequency- 
division multiplexing (OFDM), 
256-OFDM, as its standard mod- 
ulation scheme for metropolitan- 
area networks (MAN). 

The new standard has 256 
narrow-band channels, compared 
with 64 in OFDM-based 802.11g 
wireless LAN systems, said Mo- 
hammad Shakouri, vice president 
of business development at Alvar- 
ion Ltd. in Tel Aviv and a board 
member of San Diego-based 
WiMAX. 

Shakouri said WiMAX selected 
256-OFDM as a standard be- 
cause it’s very resistant to multi- 
part signals - essential ina MAN 
~ and is the same modulation 
scheme tapped by the European 
Telecommunications Standards 
Institute for use in Hagerman 
fixed wireless systems in Europe. 


Parasoft Unveils 
Java Tools Package 


Parasoft Corp. in Monrovia, Calif., 
announced general availability of 
its package of automated tools, 
services and best practices to 
prevent errors in Java applica- 
tions. Parasoft Java Solution is 
available for the Linux, Windows 
and Solaris operating systems. 
Pricing starts at $50,000. 
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Coping With Infoglut 


HE INTERNET HAS BURIED companies 
under a mudslide of unstructured data. 
One of the most pressing problems facing 
IT is how to turn all that data that won’t fit 
into rows and columns into useful infor- 


mation. And while the 
amount of unstructured 
data is growing exponen- 
tially, the tools for dealing 
with it haven’t kept pace. 

The magnitude of the 
deluge is staggering. Ap- 
proximately 85% of all digi- 
tal business information ex- 
ists only as unstructured 
data, according to research 
by Merrill Lynch. Most of 
that comes from the in- 
creasing use of the Web as 
an internal and external 
business channel. 

The majority of unstructured data 
consists of text documents. Some of 
those, such as memos, letters, market- 
ing materials and research documienta 
tion, have presented a storage and re- 
trieval problem in business since be- 
fore there was digital media. And now, 
in addition to those documents, there 
are e-mail messages, customer queries 
and responses from sales and support 
representatives generated by CRM 
applications, user group postings 
and chat messages, as well as images, 
movies and Web pages with their 
hyperlinked information. 

E-mail alone has burgeoned; market 
research firm IDC predicts that there 
will be more than 60 billion messages 
sent annually by 2006. And besides the 
business imperative to take control of 
the organization’s knowledge base, fed- 
eral regulatory initiatives increase the 
pressure on companies to both archive 
e-mail and develop a way to research 
the content of the messages. 

The other 15% of all business infor- 
mation — the structured data that gen- 
erally resides neatly in spreadsheets 
and databases — is being sliced, diced, 
massaged and squeezed for every bit of 
business intelligence it will yield. Tech- 
nologies to address unstructured data 
can’t match the functionality of these 





real-time analytics for 
structured data, and users 
have been slow to adopt 
them. Tim Berners-Lee, the 
Web’s primary architect, 
has famously observed that 
most of the information on 
the Web is designed for hu- 
man consumption and re- 
sists being organized or an- 
alyzed by any automated 
process. 

What do companies lose 
by not having the means to 
use unstructured data? Em- 

ployees’ time for one thing — recent 
studies indicate that information work- 
ers spend as much as a quarter of their 
time just finding and gathering job- 
related information. Nuanced informa- 
tion about trends and customer atti- 
tudes for another. 

Vendors recognize both the chal- 
lenge and the opportunity presented by 
unstructured data. When recently 
asked what the next big thing in busi- 
ness intelligence and data warehousing 
would be, Don Hatcher, SAS Institute’s 
vice president of technology strategy, 
answered emphatically, “Unstructured 
(data], without a doubt. We’re working 


| on it, and I’m sure the other [compet- 


ing] companies are, too.” 

SAS will try to make unstructured 
data a part of its customers’ “predictive 
process,” Hatcher said. The company is 
also “engaging thought leaders in the 
space” as it maps its route into the un- 
structured market. Of course, SAS and 
the other business-intelligence and an- 
alytics vendors haven’t exactly discov- 
ered a new frontier. 

Search has been the traditional way 
to manage and mine unstructured data, 
especially text-based documents. The 
most fruitful techniques go well be- 
yond the simple keyword queries most 
of us type into Google or Yahoo several 
times a day. Full-text searches, which 





began as a tool for the intelligence and 
library communities, have been around 
for decades — for almost as long as 
there have been digital documents. 

Search technology companies are re- 
fining their products by adding natur- 
al-language search capability; stem- 
ming, which removes common suffix- 
es; and spelling correction. They’re 
also using metadata fields to narrow 
and focus searches by adding context 
to individual queries. 

Vendors such as Verity, Autonomy, 
Stratify and Inxight offer software that 
automates the classification process 
and maintains taxonomies, as well as 
discovery systems that generate meta- 
data from documents and allow users 
to dig through the hierarchical layers. 
The big content management vendors 
are making the direct link to business 
intelligence when they describe their 
search and classification offerings as ' 
“content intelligence.” 

The big surprise, given the volume of 
unstructured data piling up in every 
modern company, is corporate IT’s lack 
of urgent interest in the problem. Data 
warehousing and business-intelligence 
projects are generally surviving the 
lousy economy more successfully than 
most technology initiatives. That’s be- 
cause companies have been won over 
to the notion that the more they can 
learn from the data in their various 
databases and other structured reposi- 
tories, the better off they’ll be in good 
times and in bad. 

But those companies have yet to be 
convinced that they have the same 
need to exploit unstructured data. 
Some foot-dragging is understandable. 
Resources are in short supply. Catch- 
phrases like content intelligence stir 
memories of the knowledge manage- 
ment hype that fizzled so miserably. 

But the problem is only getting big- 
ger, and the technologies that help us 
manage unstructured data and turn it 
into information are going to become 
increasingly important. If you don’t be- 
lieve it, go check your e-mail in-box. D 
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Reengineering Revisited 


IT-driven process reengineering 
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Outsourcers: OPINION 

Do They Measure Up? Big Benefits From 

An increasing number of IT ‘Microdeliverables’ 
outsourcing customers are using Columnist Paul Glen says the key to 
keeping projects on schedule is to 
require “microdeliverables” from 
each person, every week. Page 54 


tests to keep costs from escalat- 
ing out of control. Page 52 


This excerpt from the book What’s 
the Big Idea? explains all. Page 48 


T’S HARD TO PLACE a value 
on knowledge management 
systems. Their ability to 


generate income is often 
measured indirectly; their 
links to cost savings fre- 
quently seem tenuous. The 
return on investment is hard 
to quantify. Too often, the case for im- | 
plementing a system to leverage intel- 


But intuition wasn’t nearly 


| 
| 
| 
| 
fell out of favor. Will it come back? | benchmarking and baselining 
| 


neers, later dubbed the Learning Team, | 


volunteered to work on the problem of 
how to better capture lessons learned 
and share knowledge among Intec en- 
gineers. They diagramed how they 
solved engineering problems and envi- 
sioned an ideal process: An engineer 
with a question would go to a knowl- 
edge database that would either pro- 
vide an answer or refer him to an ex- 


The Learning Team decided 


lectual capital and expertise pert. All new knowledge would 
rests mainly on intuition: It be automatically captured and 
seems like a good idea. stored in the database. 


enough to sell executives at 

Intec Engineering Partnership Ltd., a 
company whose dedication to thrift is 
exceeded only by its passion for shar- 
ing knowledge. 

Intec is based in Houston and has of- | 
fices in Argentina, Chile, Bolivia, Eng- 
land, the Netherlands, Malaysia and 
Australia. The privately held, $80 mil- 
lion engineering and project manage- 
ment company serves the international 
oil and gas industry. Its 500-plus em- 
ployees specialize in marine pipelines, 
terminals and facilities. Clients include | 
BP PLC, Exxon Mobil Corp. and 
ChevronTexaco Corp. 

CIO Fran Steele says Intec’s culture 
is “extremely collaborative,” having 
grown from four partners in one room 
sharing knowledge using 3-by-5 cards 
indexed by keywords. “It’s a culture of 
sharing information, with a strong bias 
against bureaucracy and anything that 
might constrain creativity,” she says. 

During 2002, as Intec grew through 
expansion and international acquisi- 
tions, it was becoming more difficult to 
keep track of and access information. 
Intec wasn’t alone. According to KPMG 
International, six out of 10 employees 
say difficulty in accessing undocument- 
ed knowledge — such as the know-how 
people carry around in their heads and 
information that may be in documents 
scattered across a company — is a ma- 
jor problem. Framingham, Mass.-based 
IDC estimates that the average Fortune 
500 company will spend $64 million on 
redundant efforts this year. 

Early last year, a group of Intec engi- 





that any technology to assist this 
process had to integrate existing 
knowledge resources, automatically 
find experts, capture results for reuse, 
facilitate the identification of best 
practices and provide a quick and easy 
user interface. Administration had to 
be minimal. “I wanted something that 
would not cost any more time of the 
people asking questions and answer- 
ing,” says Willem Timmermans, presi- 


| dent and CEO of Intec. And ROI had to 


be clear from the start. 
The Learning Team shopped around 
and selected software from AskMe 
Continued on page 44 
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weeks off a proj- 
ect and help [a cus- 
tomer] . . . get to mar- 
ket sooner. .. . That’s 
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FRAN STEELE 


| Timeis big money at Intec Engineering, which 
| posted a first-year ROI of 133% with aknowledge- 
sharing system. By Kathleen Melymuka 
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Continued from page 41 

Corp. in Bellevue, Wash., as the prod- 
uct most likely to facilitate Intec’s 
problem-solving model. AskMe agreed 
to customize a three-month, large-scale 
pilot of the system for 250 engineers. 

The actual cost of Intec’s svstem is 
proprietary, but Dan Wright, vice pres- 
ident of field operations at AskMe, 
says the average pilot includes 750 
users at a cost of more than $100,000. 
The application starts at $375 per seat, 
with volume discounts beginning at 
500 seats. There is also an 18% annual 
maintenance fee. 

AskMe integrated its Web-based 
software and search engine with infor- 
mation repositories including 75,000 
technical documents, Intec’s existing 
skills and certification databases, and 
Lightweight Directory Access Protocol 
files of individuals’ names, titles, loca- 
tions, e-mail addresses and photos. 


ROI Metrics 


The Learning Team and AskMe devel- 
oped a set of metrics that would be 
used to determine whether Intec would 
purchase the AskMe software after the 
pilot. The metrics included amount of 
activity on the system (visits, unique 
visitors, expert profiles viewed, ques- 
tions asked, unique questions asked, 
answers given and average response 
time, for example), kinds of knowledge 
captured (such as questions answered, 
technical documents and best prac- 
tices), system performance and, most 
important, user feedback and ROI. 

The team agreed that qualitatively, 
knowledge management is about shar- 
ing knowledge, but quantitatively, it’s 
about saving time. So ROI would be 
about time saved and putting a value 
on it (see box above). 

The pilot, called AskIntec, began in 
May 2002. Three months later, it had 
exceeded all the performance and user 
metrics, and ROI calculations project- 
ed an annual return of 133%. 

After nearly a year, the system is 
paying off almost exactly as projected. 


Cement mR CHIU MeL (ee) 
eR RO UM CRB LGR toe 


lads up one of 

| eight category 

| home pages such 
as Pipeline, 
Subsea or Project 

| Management. 





’ Initiates a keyword 
search. The system 
presents relevant 
documents (headlines 
with short summaries 
will drill down to full 
text), Web links and 
answers to previous, 
related questions. 


MANAGEMENT 


TIME IS MONEY 


Intec’s approach to calculating ROI began 
with defining and placing a value on the 
likely products of the knowledge system. 
The Learning Team defined four Askintec 
products and assigned them values in 
terms of the engineer hours each would 
save. The value the team assigned to an 
engineer's time was a very conservative 
$50 per hour. (High-level engineers bill at 
more than $100 per hour.) 


TIME SAVINGS: 
Intec estimated that these knowledge 
“products,” when added to the knowl- 
edge-sharing database and then used 
repeatedly, would save engineers the 
following amounts of time: 
= Questions answered: One half-hour, 
or $25 
® FAQs with answers: Five hours, or 
$250 
® Technical documents: 10 hours, 
or $500 
= Best practices: 50 hours, or $2,500 


“Our numbers were pretty spot-on, but 
they’re going up,” Steele says, noting 
that the company estimates payback of 
50% more next year as nonengineering 
employees are added and the system 
becomes embedded in the culture. 
Actual savings are higher than the 
ROI figures indicate, she adds. An an- 
swered question, for example, often 
turns out to be worth much more than 
the Learning Team’s estimate of saving 
30 minutes, as senior project engineer 
David Raby demonstrated while work- 
ing in Perth, Australia. Raby had an es- 
oteric question about deep-water 
pipelines. Before AskIntec, getting an 
answer would have required accessing 
the library in Houston, ordering mate- 
rials and having them sent through the 
mail. “I might have got the wrong stuff 
or needed additional stuff, and it could 





THE RESULTS: 

After the pilot, the Learning Team did 

the math. (Actual results are confidential. 

These figures are illustrative.) 

= 150 questions answered x $25 = 
$3,750 

= 25 FAQs x $250 = $6,250 

= 40 technical documents x $500 = 
$20,000 

#4 best practices x $2,500 = $10,000 


TOTAL PILOT ROI: $40,000 





To estimate annual ROI, the team multi- 
plied the three-month pilot's total value 
by five rather than four. That was to com- 
pensate for the gradual growth in use of 
the system and to account for the fact 
that only engineers were included in the 
pilot. (The system will be expanded to 

all employees.) 


ANNUAL ROI = $40,000 x 5, 
or $200,000 


go back and forth for weeks,” he says. 
“And I still wouldn’t necessarily have 
the information I was looking for.” Us- 
ing AskIntec, he got 10 answers in a 
day, saving about three weeks’ worth of 
effort, he says. 

David Myers, a charter member of 
the Learning Team who is now Intec’s 
knowledge-sharing manager, is work- 
ing to sharpen the system’s ROI met- 
rics. A current upgrade will include an 
ROI engine that will ask users to esti- 
mate time saved on the spot rather 
than using formulas. 

There are those who question mea- 
suring time saved as an approach to 
ROI. “If I could save every worker 15 
minutes, I could say I’m saving mil- 
lions, but does that time really go back 
to something productive?” asks Mike 
Gotta, an analyst at Meta Group Inc. 


How AskIntec Works 


e 

| Post a general 
question on 
the category 
home page. 

| Any engineer 
who accesses 
the page can 
respond. 


Click on Experts. 
Names and pho- 
tos of all Intec 
engineers with 
relevant exper- 
tise in their pro- 
files appear on 
the screen. 


Heures mes malt come 
the engineer can do one of the following: 


eo 
Write a detailed 
question with 
text and attach- 
ments as need- 
ed and send the 
message to as 
many experts as 
he likes. 





Subject-mat- 
ter experts 
respond to 
queries they 
receive. 
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It’s better to measure improvement in 
outcomes such as a decrease in defects 
or a quicker turnaround, he says. 


More Than Numbers 


Process metrics are difficult to imple- 
ment at Intec because each engage- 
ment is unique, but the company is 
looking at process results anecdotally. 
“Some of the return on information is 
not quantified just by how quickly you 
can do something, but by the fact that 
you can do it at all,” Steele says. 

For example, during an engagement 
last year in Beijing, senior project 
manager Julio Daneri found that Chi- 
nese pipeline codes specified certain 
design parameters that his client didn’t 
want to use. Daneri used AskIntec to 
query colleagues on cases where com- 
panies had successfully circumvented 
national specifications. Quick replies 
from engineers on three continents en- 
abled him to build a case for using dif- 
ferent specifications, without which 
his client wouldn’t have been able to 
compete for the project. 

The system is also improving Intec’s 
sales process. Timmermans recounts 
that a prospective customer in Australia 
was skeptical about the local office’s 
ability to draw on Intec’s expertise all 
over the world. Intec invited him to 
pose a difficult question, which the In- 
tec engineer put into the system. “The 
next morning they had four very rele- 
vant answers,” Timmermans recalls. 
“We dazzled the client.” 

In the end, customers profit from In- 
tec’s knowledge management invest- 
ment, Steele says, explaining that a 
typical oil facility can produce millions 
of dollars per day in revenue. “If we 
can cut weeks off a project and help 
them get their facility ready earlier, 
they can get to market sooner and get 
that revenue earlier,” she says. “That's 
the ultimate value.” D 





Melymuka is a Computerworld 
contributing writer. Contact her at 
kmelymuka@yahoo.com. 


Answers to all queries are 
handled in the following ways: 


All Q&As 
are auto- 
matically 
incorporat- 
ed into the 
knowledge 
base. 


Engineers can 
peruse sub- 
ject-matter 
home pages 
and respond 
to questions 
posted there. 
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IT’S ABOUT MAKING SURE 
YOUR BUSINESS CAN 
TAKE ADVANTAGE OF IT. 


In a true real-time business, everything moves 

faster. Your data is always where and when it’s 
needed. You coordinate activities and automate 
processes end to end. You enjoy greater visibility 
and understanding. And you have the ability to 
drive your business with new immediacy. 
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: REAL-TIME IN ACTION: DELTA AIRLINES 


Delta Air Lines partnered with TIBCO to create the 
Delta Nervous System, which connects Delta’s 13 busi- 
ness units and 30 databases, and handles more than 5 
million daily business events. 


“The ability to share information with our employees 
and customers in real-time, and to automate how we 
share it, has allowed us to transform our business, 
improve customer service, and reduce costs.” 


—Curtis Robb, Delta Air Lines CiO, 
Delta Technology CEO 
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What went wrong with 
the business-process 
reengineering fad. And 
will it come back? By 
Thomas H. Davenport 
and Laurence Prusak, 
with H. dames Wilson 
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T ITS HEIGHT, business-process 
reengineering was one of the 
biggest business ideas ever. 
Business historians of the fu- 
ture will characterize the 1990s 
as the decade of reengineering. 
Described in more than 25 books, fea- 
tured in articles in every major busi- 
ness publication, discussed at hun- 
dreds of conferences, reengineering 
penetrated every continent, with the 
possible exception of Antarctica. 
Reengineering became a 
money machine for several of B 
its constituents: the gurus who 
propounded the idea (at least a 
couple of them!), the consult- 
ing firms that offered reengineering 
services to their clients, and the soft- 
ware vendors who managed to con- 
vince firms that their wares were criti- 
cal to successful reengineering. Unfor- 
tunately, the idea didn’t enrich those 
who were most responsible for its 
birth and continued life within organi- 
zations: the faithful practitioners. 
These individuals played their custom- 
ary heroic roles on the reengineering 
stage, but others got all the credit. 


Reengineering Defined 
Reengineering today means different 
things to different people. In the early 
writings on reengineering, however, 
there was substantial consensus that 
reengineering incorporated the follow- 
ing ideas: 

8 Radical redesign and improvement 

of work. 
Attacking broad, cross-functional 
business processes. 
“Stretch” goals of order-of-magni- 
— tude improvement. 

® The use of IT as an enabler of new 

ways of working. 

In the general business audience, 
however, other meanings proliferated. 
To some, reengineering came to mean 
any attempt to change how work is 


My 
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done — even incremental change of 
very small processes. To others, it be- 
came a code word for downsizing. The 
latter meaning wasn’t really fair, since 
none of the original literature on 
reengineering had stressed that objec- 
tive. It was a somewhat cynical adop- 
tion of the word by senior executives 
(and their communications staffs) that 
brought this meaning into being. 

We still remember the first time the 


| reengineering-as-downsizing notion 


appeared in the press. In 1995, 
Pacific Bell announced that it 
was cutting 10,000 employees. 
Because of “reengineering,” it 
didn’t need them anymore, the 
press release said. We were conducting 
some research at Pac Bell at the time, 
and we knew that although the compa- 
ny was doing some reengineering, it 
certainly wasn’t far enough along for 
anyone to know how many people (if 
any) would be freed up. Shortly there- 
after, Apple Computer Inc. announced 
a similar reduction using the “R word.” 
We were also familiar enough with 
that company to know that it wasn’t 
true reengineering. 

What happened to the term reengi- 
neering is typical of the proliferation 
of meanings that accompanies any 
successful new business idea. Consul- 
tants, middle and senior managers, 
and vendors had lots of incentives to 
jump on the reengineering bandwag- 
on. Experts in continuous improve- 
ment, systems analysis, industrial en- 
gineering and cycle-time reduction all 
suddenly became experts in reengi- 
neering. We once heard a staffer from 
the California legislature say that 
reengineering was “any project I want 
to get funded.” 

Of course, saying that all these di- 
verse activities were forms of reengi- 
neering raised expectations for the 
concept and no doubt hastened its 
demise. The late adopters of the term 
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dropped it rapidly as soon as it be- 
came unpopular. 

Where did reengineering go astray? 
Like any other business idea, reengi- 
neering had to be bought by compa- 
nies and sold by business gurus. The 
failure of reengineering can be attrib- 
uted to both parties. 


Guru Shortcomings 

A key factor in the rise of reengineer- 
ing was Michael Hammer’s 1990 Har- 
vard Business Review article on reengi- 
neering (“Don’t Automate, Obliterate”) 
and the subsequent book Hammer co- 
authored with Jim Champy, Reengi- 
neering the Corporation. These two 
sources made reengineering look both 
appealing and easy. But in late 1996, a 
front-page Wall Street Journal article 
featured a confession by Hammer: “Dr. 
Hammer points out a flaw: He and the 
other leaders of the $4.7 billion re-en- 
gineering industry forgot about people. 
‘I wasn’t smart enough about that,’ he 
says. ‘I was reflecting my engineering 
background and was insufficiently ap- 
preciative of the human dimension. 
I've learned that’s critical.’ ” 

Hammer’s earlier rhetoric certainly 
neglected the human element, with 
phrases such as, “In reengineering, we 
carry the wounded and shoot the 
stragglers,” and, “It’s basically taking 
an ax and a machine gun to your exist- 
ing organization.” This rhetoric not 
only made employees fear for their 
livelihoods; it also raised expectations 
of managers for revolutionary changes 
that couldn’t be delivered. 

There is little doubt that the Ham- 
mer and Champy version of reengi- 
neering was guilty of overblown 
rhetoric. (Most of this rhetoric comes 
either from Hammer or from ghost- 
writers; Champy is more genial and 
mild-mannered.) Both in Hammer’s 
1990 Harvard Business Review article 
and in Hammer and Champy’s 1993 
book, the claims were extravagant and 
unsupported by fact. The book cover 
suggests, for example, that “everything 
you thought you knew about business 
is wrong,” and highly simplistic argu- 
ments are made throughout. 

The greatest shortcoming of the 
Hammer and Champy reengineering 
work is not that it neglects people or 
that it employs overblown rhetoric, but 
that it fails to acknowledge how diffi- 
cult, time-consuming and expensive it 
is to reengineer. They implied that one 
could reengineer an entire corporation 
in as little as a year. We aren’t suggest- 
ing that Hammer and Champy inten- 
tionally misled anyone; they’re both 

Continued on page 50 
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Is Reengineering 
Coming Back? 


When reengineering first appeared in 
articles and books, the U.S. economy 
was in recession. Now times are tough 
again, and reengineering is offering itself 
for another run. 

Michael Hammer's 2001 book, The 
Agenda, is mostly a restatement of some 
of the key ideas behind reengineering - 
customer focus, process management, 
radical change - albeit with a more sub- 
dued tone this time. Companies are clear- 
ly interested in cutting costs. Can reengi- 
neering overcome its own real pro.slems 
and its dubious reputation to truly provide 
value to organizations? And how will it 
deal with IT this time around? 

One attribute of the new reengineering 


Continued from page 48 

honorable men. This unfounded opti- 
mism was, however, a major factor in 
the rapid rise and fall of reengineering. 
inspired by the book, managers initiat- 
ed projects with high expectations of 
rapid success. But when they encoun- 
tered difficulties and slipping project 
deadlines, many became disenchanted 
and dropped their projects. 


Implementation Problems 
The gurus of reengineering made 
some mistakes, but then so did many 
of the practitioners. First of all, many 
managers reinforced the numerous er- 
rors made by the gurus. They focused 
too much on process and not enough 
on practice — and didn’t involve the 
people who did the work. Just as some 
irresponsible writers and consultants 





is that it may not be called “reengineering.” 
Abandoning that term, with all its baggage, 
may be the easiest way to signal a new intent. 
Jim Champy has obviously been wrestling 
with this issue. His latest book originally used 
the term e-engineering, but the name was lat- 
er changed to x-engineering, signifying a 
cross-organizational focus. Maybe it will be 
called Six Sigma (or one step beyond, Seven 
Sigma) or even something as simple as 
“process redesign.” 

Whatever the name, the next version of 
reengineering should still be focused on 
processes but shouldn't be restricted to the 
back-office processes. A lot of the value and 
innovation in organizations today comes from 
knowledge workers and knowledge work 
procssses, which went largely untouched in 
the last round of reengineering. These proc- 
esses ~ marketing, new product development, 
strategic planning and even management - 
ought to go under the microscope this time. 

Much of the buzz about reengineering’s 


| generated exaggerated rhetoric and 


repackaged ideas in reengineering, so 
did companies. 

Corporate communications depart- 
ments teamed with senior executives 
to create reengineering programs with 


| names like Advantage 2000, Program 


10X and, perhaps most unfortunately, 
Project Infinity. They predicted radical 
improvements well before they were 


| achieved. In some cases, they argued 


for funding by calling their projects 
“reengineering.” The worst offense, of 


| course, was to lay off people and digni- 
| fy the act as reengineering. 


But there were several other, more 
subtle problems with how companies 
implemented reengineering. One is 
that executives turned too much of 


| their initiatives over to outside firms 


— both consultants and vendors of en- 


LESSONS LEARNED 


= Don’t forget that any change must 
be implemented by people. If their de- 
sires and behaviors aren’t front and 
center in any new business approach, 
it will have a tough time succeeding. 


= Don’t seize upon the most radical, 
hype-laden description of the new 
business idea. Sure, it can help to get 
your colleagues in the executive suite 
excited about a new initiative, but the 
expectations may be raised higher 
than what you can achieve. 


= When a new idea comes along, 
don’t forget about the old ideas. 


Reengineering should augment 
rather than replace other manage- 
ment ideas. No single business idea 
is all-encompassing or all-powerful. 


® Radical change is inherently risk- 
ier than incremental change. Still, 
sometimes the risk of radical change 
is preferable to alternative fates - 
like going out of business! 


= Revolutionary and violent rhetoric 
is a bad sign in writing and speaking 
about a new business idea. Ask 
yourself why the authors have to 
work so hard to get your attention. 





return is around the redesign of business-to- 
business processes. A chapter of Hammer's 
new book, for example, is devoted to this top- 
ic, and all of Champy’s is. We agree that the 
long-term trend is to create stronger and 
more automated linkages between suppliers 
and customers. But companies have been 
burned before on the difficulty of building 
such linkages. Remember all the talk in the 
business-to-business exchange world about 
how companies in entire industries would in- 
tegrate their processes and systems so that 
customers could shop and do deals with any 
exchange participant? It didn't happen, and 
now many exchanges are history. 

Not only was implementation costly and 
slow, but succeeding at the standards would 
lead to the commoditization of their products 
and competition based only on price. As we 
learned with internal reengineering, it's much | 
easier to design new processes than to imple- 
ment them. 

The new version of reengineering will also 


terprise software (such as ERP sys- 
tems). The software vendors supplied 
a relatively easy way to automate a 
broad range of business processes in 
an integrated fashion. 

Not surprisingly, the managers of 
reengineering projects flocked to the 
enterprise software vendors such as 
SAP AG, Oracle Corp. and PeopleSoft 
Inc. and wrapped up their reengineer- 
ing and ERP projects into one inte- 
grated change program. But these com- 
panies probably relied too heavily on 
the software as the way to implement 
reengineering. While the packages 


| were built around best practices, they 


were generic rather than specific to a 
particular company’s needs. Because it 
was difficult to modify these systems, 
most firms ended up with the same 
processes and information support as 
every other firm in their industry. 
Reengineered processes were supposed 
to yield competitive advantage, but this 
was impossible with heavy reliance on 
an enterprise software package. 

Also, many corporate reengineers 
took on too much change at once. En- 
couraged by the rhetoric of some gu- 
rus, they tried to change multiple 
processes, information systems, orga- 
nizational structure and sometimes 
even business strategy all at once. Suc 
all-encompassing change in a short 
time frame is difficult, if not impossi- 
ble. One observer noted that it was 
akin to pilots attempting to change all 
the engines in a jet airplane at once 
while flying through the sky. It may be 
possible, but the risk of failure is great. 


have a more diverse set of technologies (be- 
yond ERP). Today an enterprise system can 
address customer service and sales, product 
development and analytical processes that 
weren't even thought of in the early 1990s. 
Other new tools will vary by the process 
you're seeking to transform but include Web 
services and marketing automation. 

As new tools proliferate, they will be diffi- 
cult to integrate. The goal of cross-functional, 
cross-business-unit and cross-organizational 
integration will continue to be elusive and will 
undoubtedly inspire a large number of con- 
sulting projects. 

Since we now know that the big, one-time 
swing at process change is less likely to suc- 
ceed than a continuous process improvement 
approach, we hope that the new reengineer- 
ing will combine the incremental, continuous 
approaches of total quality management or 
Six Sigma with the power of IT. 

~- Thomas H. Davenport and Laurence 
Prusak, with H. James Wilson 


| The Good Stuff 


Despite the problems with the reengi- 
neering movement, you might ask, does 
it have any ideas worth keeping? You bet. 

In fact, almost all the ideas within 
reengineering have substantial merit 
when used in moderation. Certainly, 
firms should sometimes address broad, 
cross-functional processes. And from 
time to time, they need a serious kick 
in the pants. 

Sometimes it’s better to throw a bro- 
ken process away altogether and start 
from scratch than to improve it incre- 
mentally. And IT can no doubt be a pow- 
erful enabler and reshaper of processes. 

The key is to also remember that 
reengineering involves risk. Any time 
an organization needs radical change 
to deliver the results it needs, it’s more 
likely to fail or to come up short. 

Like baseball players who swing for 
the fences or soccer stars who take 
| kicks from midfield, they’ll miss their 
goal most of the time. But sometimes, 
desperate moves are called for. D 





Reprinted by permission of Harvard 
Business School Press. Excerpted from 
What’s the Big Idea? Creating and Cap- 
italizing on the Best Management 
Thinking. Copyright 2003 by Accenture 
Ltd. and Laurence Prusak. 





MORE EXCERPTS 


Was reengineering really new? 


Why was reengineering so popular? 
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QUTSOURCERS: 


DO THEY 
MEASUR 


UP? 


Companies are using 
benchmarking or baselining 
tests to make sure they're 
not paying too much to 
outside contractors. 


BY THOMAS 
HOFFMAN 


BELLE MELLOR 





MANAGEMENT 


NFORMATION IS POWER, and that’s especially true 
in IT outsourcing deals. So a growing number of 
IT executives are demanding that contracts in- 
clude clauses that enable them to compare the 
contractor’s costs and service levels with indus- 
try benchmarks a few years into the contract. 

A bank, for example, might invoke its benchmark- 
ing clause three years into a data center outsourcing 
deal to make sure that the vendor is providing main- 
frame CPU cycles at a reasonable cost. 

The benchmarks might also compare the amount 
of downtime the bank is experiencing to industry 
averages, the size and duration of the batch proc- 
essing runs, and other measurements to gauge the 
efficiency of the service provider. 

If the benchmarking tests reveal that the out- 
sourcer is charging considerably higher costs for its 
services compared with industry averages or is fail- 
ing to meet other service-level agreements, the bank 
has several options. It could elect to renegotiate its 
contract with the outsourcer, invoke the financial 
penalties in the contract, bring the function back 
in-house or bid it out to other vendors. 

“If we’re going to sign long-term agreements with 
our supplier partners, we certainly have been asking 
for benchmarking tests to be implemented into the 
contracts so at points in time we can test the market- 
place,” says Cathy Brune, chief technology officer at 
Allstate Insurance Co. in Northbrook, Ill. 

One benefit is that if there’s a sudden drop in mar- 
ket prices for a particular IT function, such as help 
desk support, “we’re not saddled with contracts 
where we're being charged too much,” Brune says. 
In addition, benchmarking agreements make her 
more comfortable in signing longer-term outsourc- 
ing deals. That way, “we’re not in constant churn or 
constantly reworking contracts,” she adds. 

Brune’s not alone. The Hackett Group, an At- 
lanta-based IT advisory service that has a database 
of nearly 2,000 benchmark participants, estimates 
that it has seen a 25% to 33% increase in the number 
of benchmarking clauses written into outsourcing 
contracts over the past year, says director Scott 
Holland. “It’s on the tip of everyone’s tongue,” 
says Holland. 

The outsourcing contractors don’t like bench- 
marking clauses, though they often feel forced to 
accept them. The problem is that an outsourcing 
contract is typically front-loaded, meaning the price 
is low in the first two years to give customers the 

upfront cost savings they’re seeking, but then 
climbs in the third and fourth years so the contrac- 
tor can make a profit. 
Outsourcing vendors complain that 
benchmarking is unfair to them because 
the tests single out a period where 
they’ve built in a short-term “uplift” in 
prices to cover their costs, says Rod Hall, 
vice president of consulting at Compass North 
America in Chicago. Moreover, the tests don’t ade- 
quately examine costs and service levels over the 
lifetime of a contract, he adds. 

A new wrinkle is the emergence of baselining ser- 
vices. Whereas benchmarking takes a snapshot of 
service metrics, baselining compares the average 
costs and service levels through the life of a contract. 

Baselining can also be used to compare the year- 
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over-year costs and the efficiency of an internal 
IT department. 

Vendors obviously see baselining as the fairer 
approach. And some customers like baselining be- 
cause it gives them a better idea of the average costs 
they’re paying over the life of a contract and how 
those compare with peer and vendor averages. 

So if a vendor’s costs and service levels are in line 
with industry averages, most customers would be 
content with that rather than going through the ex- 
pense and headaches of negotiating a new contract. 
With baselining tests, says Hall, “a customer can 
determine from start to finish if this is a reasonable 
contract or not.” 


The Offshore Component 

Interest in baselining has also heated up as more 
companies have started to send software develop- 
ment and maintenance work offshore to take advan- 
tage of lower labor rates. 

But companies aren’t simply using baselining 
services for cost comparisons, says Michael Mah, 

a senior consultant at the Cutter Consortium and a 
partner at QSM Associates Inc. in Pittsfield, Mass. 
The metrics can also be used to keep an eye on off- 
shore practices. 

Because of the abundance of low-cost program- 
mers overseas, some offshore providers that get 
paid based on the number of programmers they use 
will try to place extra bodies on a project to pump up 
their revenues, according to Mah. 

“But if you double the labor, you won't double 
your productivity, and sometimes you end up intro- 
ducing more software errors and running into higher 
costs” to fix them, he says. 

That’s why it’s important for outsourcing cus- 
tomers to examine various metrics, including the 
cost per function point to produce or support code, 
the amount of functionality being delivered over 


a period of time, and the pro- 
LINKS GALORE 


ductivity of programmers 
and development teams, says 
i For a list of benchmarking 
Mah. The trick, he says, is services, Viit 
@ QuickLink 39032 


knowing which metrics are 
really important. D www.computerworld.com 
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Auto-ID Technology 
Could Save Billions 


Auto-ID, a technology that tags 
and tracks inventory and equip- 
ment, could save manufacturers 
and retailers billions of dollars 
each year, according te research 
this month from Accenture Ltd. 
Auto-ID is a combination of elec- 
tronic product codes and radio fre- 
quency identification that Accen- 
ture said can improve production 
operations, asset use, forecasting 
and inventory by pinpointing the 
location and status of products as 
they move through the manufac- 
turing and retail value chain. Stan- 


dards are the key to enabling inter- | 


operability among multiple ven- 
dors, said Accenture. 


PNC Bank Taps 
Scales as New CIO 


William Scales, 
an IT executive 
with more than 
20 years’ experi- 
ence in the bank- 
ing and financial 
services industry, 
has gone to work 
at PNC Bank in Pittsburgh as the 
CIO of its Treasury Management 
division. In this newly created role, 
Scales will be responsible for the 
technology-related strategy and 
systems that support PNC Bank’s 
customized business services and 
cash management technology. He 
previously held executive positions 
at Principal Capital and Wachovia 
Corp. 


AMR Forecasts ERP 
Software Market 


According to predictions from AMR 
Research Inc. published by eMar- 
keter Inc. last week, a merger be- 
tween PeopleSoft Inc. and J.D. Ed- 
wards & Co. would give the two 
companies a combined 14% of 
worldwide enterprise software 
sales for 2003. Oracle Corp., with 
13% market share, would become 
the third-largest vendor in terms of 
revenues. SAP AG would retain 
market leadership with 36%. Best 
Software Inc. would maintain 4%. 
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ig Benefits From 
crodeliverables 


OO OFTEN, failing projects surprise us. 
How many times have you thought a proj- 
ect was going along fine only to discover 
when the delivery deadline drew near that 
everyone on the team was two months be- 
hind schedule? In situations like that, you wonder, 
“How could I have missed that this project was run- 
ning two months late? What planet was I on where it 


appeared to be on time?” 


Given that approximately three-quarters of all tech- 
nical projects fail to meet their schedules, budgets or 
feature-set goals, you’d think we would be better at 


spotting groups that are 
“off the rails.” The reality is 
that it’s not easy to deter- 
mine when a project is in 
trouble, and problems that 
seem obvious in hindsight 
are murky at the time that 
they occur. 

Monitoring project 
progress is an important 
part of a leader’s role. 

Knowing when and how to 

intervene in failing proj- 

ects is critical to the over- 

all health of any technolo- 

gy organization. Whether 

the intervention is to can- 

cel a hopeless effort or to 

correct team skill or resource imbal- 
ances, managers need to spot difficul- 
ties early in order to disasters. 

Of course, projects don’t slip two 
months in one day. They fall behind a 
little every day, and the slippage accu- 
mulates until we notice it. So the 
question is, How can you notice the 
problems and fix them when they’re 
molehills rather than mountains? 

Most project methodologies call for 
monitoring task completion rates, 
counting hours expended and track- 
ing the budget to check on the health 





of a project. Unfortunately, 
I find that these methods 
are inadequate to gauge 
real progress. Estimating 
task completion is notori- 
ously subjective. The last 
10% always seems to take 
80% of the time. The num- 
ber of hours expended has 
nothing to do with 
progress; effort rarely 
equals results. And al- 
though it’s important to 
know how much of your 
budget has been spent, any 
positive correlation be- 
tween the percentage of 
budget expended and per- 
centage of project completed is gener- 
ally coincidental. 

The best method that I’ve found is 
to use what I call “microdeliverables. 
Most projects are planned with a se- 
ries of tasks that lead to major deliver- 
ables: the documents, deployments or 
code that the tasks create. But these 
deliverables are usually the result of 
many people’s work over a period of 
weeks or even months. 

Microdeliverables are much small- 
er, individual efforts. When you plan 
for microdeliverables, each person on 


” 





a project has responsibility for some 
physical product every few days. Then 
you can gauge the health of the proj- 
ect by checking whether the microde- 
liverables are done or not. You don’t 
have to wait for months until a big 
deadline looms to check the health of 
a project. 

When planning for and using mi- 
crodeliverables, there are a few simple 
rules to follow: 

1. Never let anyone go longer than a week 
without owing a microdeliverable. Any time 
a person goes longer than a week 
without a deliverable, he goes into a 
black hole of unknown progress. You 
can’t really gauge how he’s doing, and 
you're more likely to be surprised. 

2. Microdeliverables are either done or not 
done. When measuring progress, there 
are only two states for microdeliver- 
ables. They’re either 100% complete, 
or they’re 0% complete. Progress is 
marked only by final approval of the 
item. Otherwise, you get into the sub- 
jective world of guessing how close to 
done things are, which is inevitably 
inaccurate. 

3. Progress isn’t measured in effort, but in 
microdeliverables. The only meaningful 
measure of progress is whether mi- 
crodeliverables are done on time or 
not. If they’re coming in late, the proj- 
ect is late. If they’re on time, the proj- 
ect is on time. 

4. A microdeliverable is the responsibility 
of only one person. If the deliverable is 
owned by more than one person, it 
becomes a problem to figure out 
where the real difficulties lie. 

Using these simple rules, you can 
begin to identify project problems 
quickly and accurately and avoid the 
surprises that are otherwise all too 
common. BD 
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IT Careers: Top Jobs in IT 


professionals works for a non-IT company, mark- 

ing a significant shift of IT workers from software 
development and consulting firms to more traditional 
business operations — manufacturing, health care, 
financial services and the like. 


- ully nine of every 10 information technology 
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Web Database 
Design/Admin Development Dev/Admin 


Systems 
It's a much different picture than in the year 2000 

when the hot jobs were found within the IT industry. 
Today, the more stable situation lies with non-IT compa- 
nies. And the jobs to target are those in the areas of 
database management and administration, security 

and technical support. 


Enterprise Programming _Digital 


According to the ITAA workforce development study 

released in May, more than 10 million people work as 

IT professionals. The report indicates that IT companies 

are more likely to use off-shore IT resources for projects, 

and non-IT companies are more likely to stick to hiring 

plans, to keep jobs at home and are likely to follow cor- 
porate-wide compensation 
plans. The report also 
found that downsizing has 
slowed, with hiring slightly 
outweighing layoffs for the 
past two quarters. 


More than 400 hiring man- 
agers responding to ITAA’s 
survey reported that while 
demand for IT workers 
continues to fall, they plan 
to hire better than 490,000 
IT workers in 2003. Despite 
a real tumble since 2002, 
tech support as a category 
continues to employ the most IT workers, primarily to 
improve and fully capitalize on systems supporting 
non-IT business strategy. The number of web devel- 
opment positions also took a dive, while database 
development/administration and enterprise systems 
positions remained relatively steady. 
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What's driving the hiring? Planned investment to 
improve operations. The federal government is driving 
hiring in cyber-security, for agencies ranging from the 
Department of Homeland Security to the Department of 
Agriculture. While most every federal agency is looking 
for IT professionals, so too is the Department of Defense 
in its recruitment of uniformed personnel to man the 
varied high tech systems being used in peacekeeping 
and warfighting. While the telecom industry is far from a 
recovery, Sprint is driving a trend toward next-generation 
technology with the announcement of a multi-billion 
dollar investment to support a 12-year plan for 

new technologies. 


Companies such as IBM, HP, Dell and Oracle also contin- 
ue to drive hiring as they provide on-demand computing 
services to their clients. 
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PROGRAMMER to create, modi- 
fy and maintain computer prog- 
rams using Clipper, Visual Basic 
HTML, JavaScript, Xbase++, Cry- 
stal Report, ADO, OCR and SQL 
Server; secure specifications to 
determine scope and limitations 
of project; review flow charts, pre- 
pare and redefine programming 
structure to meet changing busi- 
ness needs. Require: Bachel- 
or's in Computer Science/Infor- 
mation Systems and two years of 
experience. Competitive salary 
and benefits. Apply with resume 
to: Recruitment Manager, Health- 
Logic Systems Corporation, 6185 
-C Buford Highway, Norcross, GA 
30071 


Senior Software Engineer in 
Louisville, KY. Design and devel- 
Op multi-tiered internet software 
using Microsoft tools. Design and 
administer SQL Server databas- 
es used for software develop- 
ment. Participate in sales cycle. 
Requirements: B.S. in computer 
science or B.S. in business with 
computer information systems or 
management information sys- 
tems focus. Two years hands-on 
experience in the 


TUNITY EMPLOYER 
résumé to Polarity Software, 
1050 Bardstown Road, Louisville. 
KY 40204 


COMPUTER PROGRAMMER to 
design, develop and maintain com- 
puter programs for current Enter- 
prise Project Management Soft- 
ware System(EPMS) using Java 
JSP, XML, Oracle 9i, and ASP. 
develop interfaces to access 
Primavera Expedition project/con- 
tract control subsystem and P3e 
scheduling subsystem; program 
and maintain Web-based on-line 
invoice systemandWeb portal appli- 
cations. Require: Bachelor's in 
Computer Science/information Sy- 
stems and two years of experience. 
Competitive salary and benefits 
Apply with resume to: Regional 
Manager, 4U Services, Inc., 5295 
Highway 78, Suite D-223, Stone 
Mountain, GA 30087 


Database Design Analyst 

sought by Kiretsu 
Technology, Inc., a 
S/ware Consulting Co., 
for position in Pembroke 
Pines, FL.. Must have BS 
& 4 years s/ware dvipmt 
exp. Respond by resume 
to Kiretsu Technology, 
Inc., 8362 Pines Bivd., 
Suite 303, Pembroke 
Pines, FL 33024, Attn: 
Lonnie Spears. 


Programmer Analyst wanted by 
private label specialty retailer in 
Warrendale, PA. Must have a 
Bachelor's Degree or foreign 
equiv. degree in IT or related and 
3 years exp. in job offered or in 
database and software applica- 
tion development. Experience 
must include knowledge of SQL, 
PL/SQL, SQL*PLUS Commands, 
PRO*C, UNIX Shell Script, VB- 
COM, and Visual C++ languages; 
NT and UNIX Operating Systems 
and SQL*LOADER. Respond to 
Shawna Lemke, HR, American 
Eagle Outfitters, Inc., 150 Thorn 
Hill Drive, Warrendale, PA 15086. 
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Programmer Analyst required by 
Comp Software Dvipmt Co 
Bach & 2 yrs exp to dsgn, dvip, 
maintain & impimt Oracle 
d/base, Forms & Reports. Dsgn 
Client Server based systems 
using HTML/DHTML & Oracle 
Perform data modeling using 
Designer 2000. Write proce- 
dures & triggers on databased in 
Forms & Reports using PL/SQL 
Job to be performed at 
Wilmington, DE & various unan- 
ticipated client sites throughout 
the US as assigned. Resume to: 
Trinet Sol., Inc. P.M.B. #5534 
2711 Centerville Rd, Ste 120 
Wilmington, DE 19808. 


Seeking qualified applicants for the 
following positions in Memphis, TN 
Technical Advisor/Scientific Pro- 
grammer. Provide technical advice 
and expertise for real time or batch 
scientific programming systems/ 
applications. Requirements: Bach- 
elor's degree or equivalent in com- 
puter science, operations research. 
mathematics, statistics or related 
quantitative discipline plus 7 years 
of experience in systems develop- 
ment, including 2 in scientific envi- 
ronment. Experience with ArcGiS 
and Visual Basic also required 
“Master's degree in appropriate 
field will offset 2 years of general 
(non-scientific) experience. Submit 
resumes to Chris Holliday, Federal 
Express Corporation, 3680 Hacks 
Cross Road, Bidg H, 2nd Floor, 
Memphis, TN 38125. EOE M/F/D/V. 


Database Administrator/ 
Analyst for banking s/ware 
applics co. in Miami, FL. 
Reqmts: Bach or equiv in 
Business Admin. 4 yrs exp 
in job offd or 4 yrs exp as 
Database Analyst/Business 
Analyst in related industry. 
Will consider applicants 
wiany suitable combo of 
education, training or exp 
Respond to Sally A 
Herrick, HR Director, ERAS 
JV, 13501 SW 128th St, Ste 
117, Miami, FL 33186. 


Programmer Analyst 
needed w/exp in web & 
Windows applications 
using DHTML (Javascript 
& VBScript), ASP, JSP, 
Webconnect, XML, VB, 
VFP, SQL server, Oracle, 
iS & Apache. Design & 
develop reports using 
Crystal Reports. Develop 
WAP applications using 
WML. Send resumes to 
Vedas, 23 Crosby Dr., 
Bedford, MA-01730. 


BYSoft, Inc. (Houston, TX) is seek- 
ing Software Engineers with exp. in 
using OpenGL, VC++, MFC, VB. 
XML, X/Motif, COM/DCOM, and 
OOP on UNIX/Linux, Windows 
NT/2000. Send resume to 10039 
Bissonnet, #200, Houston, TX 
77036, 713-776-1111(T) or info@ 
bysoftinc.com. Attn: Christina. 


Seismic Micro-Technology, Inc. 
(Houston, TX) is seeking a Soft- 
ware Tester to test geosciences 
software. 1 yr. exp. in seismic inter- 
pretation using geosciences soft- 
ware. Send resume to 8584 Katy 
Fwy, #400, Houston, TX 77024 
Attn. Manager of HR or 
713-464-6440(F) 


Web Product Analyst I 


DUTIES: Consult on system de- 
sign, utilization, & availability of 
web based products & technologies 
for credit card processing systems 
act as a liaison between system 
experts & the client; ensure meth- 
odology is followed & standards are 
met while tracking all projects & 
maintaining appropriate documen- 
tation; lead clients & TSYS entities 
through life cy implementation 
enhancement, & stomization pro- 
jects. Develop functional require- 
ments & specifications; use cases 
& process flows for each project: 
assist in developing new products 
& enhancements; manages project 
plans in c dination w/ other 
TSYS entities including technology 
operations, & messaging services 


REQUIREMENTS: Bachelor or 
equiv. in Business Administration 
Information Systems, Network 
Engineering, or Computer Science 
+ total of (5) years experience in 
credit card or financial services of 
which/including (2) years of experi- 
ence w/ TSYS processes, system 
support, and project management 
Must have legal authority to work in 
the U.S. Please send resume 
demonstrating all minimum require- 
ments to: Kerri Alexander, 1600 
18t Ave., Columbus, GA 31902. 
Ref # WPA/PA. 


Sr SW Eng for wireless telecom 
co in Redmond, WA. Duties incl 
complex analyses re dsgn 
dvipmt & imp! SW for wireless 
telecom products & services 
dsgn & dvip embedded real-time 
SW _ systems w/SW project 
teams & HW product dviprs for: 
wireless telecom & networking 
products & apps; impi SW sys- 
tems; dvipg SW reqs & prep 
detailed dsgn docs; & consult 
wicustomers re reqs, dsgn & 
imp! of SW systems. Job reqs 
incl 3G wireless comm stds 
(CDMA, GSM) & networking 
stds (TCP/IP, Internet RFCs). 
proficient w/ C/C++, assembier, 
CVS, Windows, VxWorks & 
Nucleus RTOS, JTAG debug- 
gers, ARM dvipmt tools, Gnu 
CC, gdb, Visual C++ & exp 
wiMIPS, ARM & M68K, embed- 
ded targets. Reqs: BS (or equiv) 
in Eng or related field. 10 yrs exp 
in job offd or 10 yrs exp in dvipg 
wireless apps. Respond to HR 
Elektrobit Inc, 


Redmond WA 98052 


APPLICATION SYSTEMS ARCHI- 
TECT Responsible for application 
systems design, balancing optimiz- 
ation of application access with re- 
source use factors. Design and 
construct application systems and 
develop requirements and design 
specification for new and existing 
applications. Create, revise and 
maintain document requirements 
for data, workflow, logical process- 
es, hardware and operating system 
environment, interfaces with other 
systems, internal and external 
checks and controls, and outputs. 
Require: Bachelor's degree in 
Computer Science, Engineering, or 
a closely related field, with 4 years 
of experience in the job offered or 
as a Software Programmer/Con- 
sultant, Experience must include 2 
years of application systems design 
experience using Visual Basic and 
SQL Servers; Send resume to: 
Recruiter Human Resources 
AgFirst Farm Credit Bank, P.O. Box 
1499, Columbia, SC 29202. (No 
Phone Calls Please) 


PROGRAMMER ANALYSTS 
for Chicago, IL office. Design 
& Develop software applica- 
tions using C++, Oracle, 
Sybase, XML, UML, Coolgen, 
Interwoven, ClearCase 
Clear-Quest, Plumtree, ITS, 
PVCS, UNIX. Bachelors req'd 
in Computers, Engineering or 
related field of study +2 yrs of 
related exp. 40 hrs/wk. Must 
have legal authority to work 
permanently in the U.S 
Contact HR Manager, Stellar 
Software Network, Inc., 3601 
Estacado Ln, Plano TX 
75025. 
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Software Engineer: Develop and 
maintain software for a web load 
testing product that helps Web 
sites to improve quality and per- 
formance of service they provide 
to their customers. Research 
and develop multi-threaded load 
agent technologies in a distrib- 
uted software system. Work with 
QA and product support to iden- 
tify and correct defects. Work 
with engineering team to brain- 
storm and test new ideas. In- 
vestigate ana assess emerging 
web and software technologies. 
Research and develop high- 
level designs and implement 
them in code. Provide software 
performance analysis of load- 
agent technologies and Web 
applications. Program in Visual 
Basic, Java, Microsoft SQL Ser- 
ver, XML, Visual C++, COM 
DCOM. Design complex prod- 
ucts in a Windows environment 
and use object-oriented skills to 
develop products. Require- 
ments include a Master's degree 
or equivalent in Computer Sci- 
ence or closely related field and 
one year of work experience in 
the job offered or related field of 
software engineering using Java 
and object-oriented design 
skills. Applicants must have 
unrestricted authorization to 
work in the United States 
Salary $82,400/year. 40 hours/ 
wk. Respond with two copies of 
resume to Case #200202025 
Labor Exchange Office, 19 
Staniford St., 1st Fl., Boston, MA 
02114 


Senior Software Engineer-Lead 
and/or participate in specifica- 
tion, design, development and 
support of products including 
overall architecture, component 
interfaces and communication 
schemas; client and server-side 
Programs using Java, C++ 
based product API's; Oracle 
SQL Server and LDAP database 
schemas. Assist with develop- 
ment of project plans and sched- 
ules. Follow rigorous software 
engineering standards including 
developing product require- 
ments, functional and design 
specifications and adhering to 
coding standards. Create new 
tools and procedures to 
enhance the development 
process. Lead efforts to identify 
and resolve any product perfor- 
mance issues. Mentor junior 
engineers Requirements 
include a Bachelor's degree or 
equivalent in Computer Science. 
Information Systems or related 
field and three years of work 
experience in the job offered or 
related field of software engi- 
neering. Applicants must have 
unrestricted authorization to 
work in the United States. Salary 
$86,000/year. 40 hours/wk 
Respond with two copies of 
resume to Case #200202319 
Labor Exchange Office, 19 
Staniford St., 1st Fl., Boston, MA 
02114 


Senior Software Engineer. Engin- 
eers new client-server apps using 
latest desktop, web & database 
technologies & Windows platform 
tools. Models inci. earthquakes 
tornadoes, hurricanes, floods; in- 
corp. numerical simulation peril 
intensity at sites in area of interest 

sis, subst 
scientific & computer s/w dev 
knowl. to ensure products quality. 
Salary $76K, 40 hrs/wk. Min. req 
BS Physics, Math, Computers or 
related; 2 yrs exp. in s/w dev, inter- 
net tech. & systems integration 
Spec. req: numerical analysis 
Microsoft Visual C++, SQL Server. 
ISAPI programming, multithreaded 
s/w programming, Winsock & 
Berkeley Sockets and Client 
Server programming. Submit 2 
copies resume to Case # 
200202092, Labor Exchange 
Office, 19 Staniford St, 1st. fl 
Boston, MA 02114 


Snr Software Engineer/Develop- 
er to design, develop, test & 
maintain applications to support a 
complex Global Reference Data- 
base System w/in a multinational 
mutual fund environment. The 
database is at the hub of a critical 
trading environment with data dis- 
tributed internally to multiple fund 
accounting, equity trading sys- 
tem, decision-support & info man- 
agement applications. Will create. 
populate & maintain this data- 
base that incorporates sound 
business rules including referen- 
tial integrity, data scrubbing 
auditing & data verification. Will 
also provide application & pro- 
duction support to end-users 
Requires Bach or equiv in CSc 

Technology, Eng. Math or Physics 
plus 3 ys experience in job of- 
fered, OR 3 ys developing appii- 
cations in an AS/400 environ- 
ment. Candidate must also pos- 
sess demonstrated expertise in 
design & development of B2B 
applications using IBM Web- 
sphere Application Server on IBM 
iSeries System; dem expertise 
developing 82B applications on 

TG Dynamo 5.1 using Dynamo 
Application Server & Dynamo 
Commerce Server & dem exper- 
tise developing & tuning DB2 
UDB & Oracle SQL Stored Pro- 
cedures using SPL & PL SQL 
Sal: $76,000/yr, M-F, 9A-5P. Send 
2 resumes to Case #200201101 
Labor Exchange Office, 19 
Staniford Street, 1st fil. Boston 
MA 02114. EOE. Appiicants must 
be workers eligible to accept full- 
time employment in U.S. 


Design Engineer: Develop and 
deploy custom software applica- 
tions that enhance the produc- 
tivity and communication of the 
company's engineers, the gath- 
ering of user requirements, and 
the design and development of 
web-based applications for solv- 
ing engineering and information 
systems problems. Develop 
applications in a multi-tiered 
environment that utilize state-of 
the-art technologies such as 
object-oriented internet pro- 
gramming and relational data- 
bases. Use Oracle Database 
administration, PL/SQL script- 
ing, OB2, DB2 EEE, SQL Server 
Administration, Perl scripting 
Winrunner, Unix System admin- 
istration, HTML, ASP, and 
Veritas Volume Manager 
Support databases in storage 
array environment. Require- 
ments include a Master's degree 
or equivalent in Computer 
Science, Electrical Engineering 
or closely related field and three 
years of work experience in the 
job offered or related field of 
software development. Appli- 
cants must have unrestricted 
authorization to work in the 
United States. Salary $75,000/ 
year. 40 hours/wk. Respond with 
two copies of resume to Case 
#200202161, Labor Exchange 
Office, 19 Staniford St., 1st Fl 
Boston, MA 02114 


Downtown Law Firm seeks 
Computer Hardware Technician 
(evening shift) to perform hard- 
ware & software maintenance 
configuration (TCP/IP, NIS 
NFS, ONS) & operations for a 
broad range of applics running 
on Unix HP-UX & Windows 
Perform daily & monthly produc- 
tion processing & backups using 
tar, Cpio, Omnibak II, Unix 
System Administration (kernel 
configurations, file system struc- 
ture, Raid, user & process man- 
agement, programming/script- 
ing). Maintain PC based sys- 
tems including MS Office trou- 
bleshooting. BS in Comp info 
Sci or Comp Engg w/relevant 
work exp. reqd. Send resume to: 
Admin. Personnel Cleary 
Gottlieb, Steen & Hamilton, One: 
Liberty Piaza, NY, NY 10006. 
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Serior Database Administrator 
Responsible for assigned data- 
base application and for accept- 
ing the database design, agree- 
ing on database management 
system acquisitions. performing 
or checking sizing results, ac- 
quiring requisite system software 
and system/storage devices 
performing data change control 
installing and upgrading data 

software, implementing 

large size production. 

test and staging databases 
Maintain a dictionary or reposito- 
ry. Assist operations staff in the 
setup of the required operations 
environment for running the sys: 
tem. Assist in the provision of 
agreed service levels to the user, 
business, monitoring the sysiem 
(deriving statistics for usage, per- 
formance, problems, utilization 
etc). Ensure integrity of data in 
the database per defined data- 
base constraints and help to 
maintain and define such con- 
Straints with active participation 
from development groups. Ad- 
minister several complex objects 
in development project. Analyze 
issues and make decisions 
Work on non-standard problems 
or issues and create and docu- 
ment solutions. Administer and 
implement security integrity con- 
trols. Follow and adhere to poli- 
cies, procedures and standards 
relating to database manage- 
ment. Use knowledge of Oracle. 
Unix, WindowsNT/2000/98, and 
Internet Security. Requirements 
include a Bachelor's degree or 
equivalent in Computer Science. 
Electronics Engineering or close- 
ly related Engineering field and 
six years of work experience in 
the job offered or related field of 
Oracle database administration 
Applicants must have unrestrict 
ed authorization to work in the 
United States. Salary $82,000 
year. 40 hours/wk. Respond with 
two copies of resume to Case 
#200202599, Labor Exchange 
Office, 19 Staniford St. 1st Fi 
Boston, MA 02114 


Kanbay is a premier global 
systems integrator that provides 
high-quality, high-value solutions 
to the insurance, banking 
credit card, consumer lending 
and securities industries. We 
provide a complete lifecycle of 
services including program 
management, business analysis, 
technology planning, 
architecture, application 
development, maintenance and 
support. Our specialized 
services include business 
intelligence, package selection, 
customization, implementation 
and testing 

The following opportunities 
cre bosed ct our corporate 
headquarters in Chicago and 
locations nationwide. 

We are seeking candidates 
with technical skills in: JAVA, 
J2EE, OOAD, WebSphere 
XML, .Net, COBOL, CICS, 
DB2, JCL, and VisionPlus 
expertise in an MVS 
environment. 


= Technical Architects 
Project 


For consideration, forward 
response to: Kanbay, Inc 
6400 Shafer Ct., Suite 100, 
Rosemont, Il 60018. Fax 
847-318-0784. Email 
rstewart@kanbay.com. Please 
reference code CW0603 in 
all correspondence. Kanboy is 
rmative Action 
yer /EOE organization 





TechNation Software Consulting 
inc, a software consulting company 
with its main place of business at 
Sioux Falls, SD has multiple posi- 
tions for Software Professionals in 
the area of Datawarehousing 
Technologies and in Middleware 
TechNation intends to build a top 
notch team that can provide solu 
tions in these areas and is looking 
for professionals at Techlead 
senior programmer analysts and 
Jeveloper positions 
1. Techleads: Will lead a tez 
3-5 programmers in new 
maintenance, provide 
lead the team in deve’ 
pment and will allocate work 
and take responsibility of time 
schedules 
Senior Programmer Analysts 
Will analyze client needs, eval 
uate existing software, gather 
requirements, and help design 
the specs along with taking 
part in customization of soft 
ware 
Developers: Will code, help 
sstomize software and wil 
perform unit testing 


Requirements: Ail positions require 
BS in Comp. Science or its equiva 
lent with more than 3 years of over 
all IT Experience. All positions wil 
one of Busin- 
ess Objects, Cognos, Informatica 
Oracle Express, Siebel, Tibco or in 
WebMethods with experience in 
allied Internet technologies. 


require experie 


TechNation provides onsite-consul: 
nts across the 

ed States and hence a key 
equirement for all positions is that 
candidates must be willing to relo 
cate across the country for periods 
ween 3-6 months or as needed 


Send resumes to Rona Troff, 300 
N. Dakota Ave. Suite #505-B, Sioux 
Falls, SD 57104 or email rtroff@ 
tnscinc.com . Fax: 530-733-2775. 


Senior Software Engineer: Lead 
and participate in specification 
design, development and sup- 
port of Internet Security prod- 
ucts, including overall architec- 
ture, component interfaces, and 
communication schemas; client 
and server-side programs using 
Java, XML and C++ on both 
Windows and Unix; Java and 
C++ based product APIs 
Oracle, SQLServer and LDAP 
database schemas. internation- 
alize software and globalize 
product Develop _ product 
requirements, functional and 
design specifications and adher- 
ing to coding standards. Lead 
efforts to identify and resolve 
any product performance 
issues. Requirements include a 
Master's degree or equivalent in 
Computer Science, an Engin 
eering discipline or closely relat- 
ed field and two years of experi- 
ence in the job offered or related 
field of software development 
engineering. Applicants must 
have unrestricted authorization 
) work in the United States. 
Salary $78,000 /year. 40 
hours/wk Respond with two 
copies of resume to Case 
#200202158, Labor Exchange 
Office, 19 Staniford St., 1st Fl 
Boston, MA 02114 


YSTEMS ANALYST (2 Positions) 


Create & modify systems w/corp 
price mgmt., inventory scanning 
stock status database & related 
components. Using Cool:Gen 
VAG, COBOL, DB2, CICS, JCL & 
client/server techs., write specs 
for system modifications, partici 
pate in tech. design of systems 
enhancements & develop, test, & 
implement app. code. Eval. struc 
ture & flow of data through 
assigned systems. Implement sys- 
tem changes & enhancements 
w/support for continuing systems 
maint. Make on-line & batch sys- 
tem changes, as weil as write & 
execute test plans & data. Eval 
structure & flow of data to deter- 
mine results, sources & structure 
of data, & file org. for optimal sys- 
tem usage. Requires: B.S. (or for- 
eign equiv.) in Comp. Sci., Math 
Engn., or related field & 2 yrs exp 
as Systems Analyst, Prog. Analyst 
or Prog.. EOE. 40 nrs/wk. Send 
resume to Kim Richitelli, Belk 
Stores Services, Inc., 2801 W. 
Tyvola Rd., Charlotte, NC 28217 
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Senior Developer-Perform life- 
cycle web-based application de- 
velopment including turning busi- 
ness requirements into system 
pecifications, designing data- 
base schemas, creating middie 
tier components, creating user in- 
terface, and implementing appli- 
cations using the latest client 
server and web technologies 
Design and develop robust secu: 
rity infrastructures to support the 
Windows-based application to 
achieve fine-grained functional 
and data secusty requirements. 
Research and recommend new 
network, application and web 
security method and implement 
these methods in related projects. 
Communicate the end-user feed 
back to the project leadership for 
action. Correct problems, modify 
or enhance programs and soft- 
ware functions to accomodate 
changing business rules, and 
support the application rollout at 
various customer sites. Use 
knowledge of MS SQL Server 
2000. Requirements include a 
Master's Degree or equivalent in 
Computer Science, an Engineer 
ng discipline or related field and 
at least three years of pre-or post 
degree work experience in the job 
offered or related field of software 
engineering using Microsoft de 
velopment technologies. Appli- 
cants must have unrestricted 
authorization to work in the Unit 
ed States. Salary $85,561/year 
40 hours/wk. Respond with two 
copies of resume to Case 
#200201803, Labor Excnange 
Office, 19 Staniford St., 1st Fl 

Boston, MA 02114 


©) ptc 


PTC (Parametric Technology 
Corporation) is one of the 
world's largest software com- 
panies with a total commitment 
to product development 
PTC's software impacts every 
area of the product lifecycle 
from product planning and 
engineering to service and 
support 


PTC has the following opportu- 
nities at its San Jose, CA facil- 
ity 


Senior Application 
Specialists (BS degree plus 
two years' experience in tech- 
nical support or a develop: 
ment environment and exper- 
tise programming in C or C++ 
or a MS degree and no expe- 
rience and expertise program- 


ming in C or C++) 


Senior Implementation 
Consultants (BS degree plus 
two years’ experience in PDM 
consulting or PDM develop- 
ment or a MS degree and no 
experience) 


Senior Software Engineers 
(BS degree plus one year 
experience in software devel- 
opment and expertise pro- 
gramming in Java and HTML 
or a MS degree and no expe- 
ience and expertise program- 
ming in Java and HTML) 


Please send resume to 
Diane Radula 
PTC Human Resources 
140 Kendrick Street 
Needham, MA 02494 
or email to 
drrecruiting@ptc.com 


PROGRAMMER ANALYSTS 
for Chicago, IL office. Desian 
& Develop software applica- 
tions using C++, Oracle, Sy- 
base, XML, Coolgen, Inter- 
woven, ClearCase, Clear- 
Quest, Plumtree, ITS, PVCS 
UNIX. Bachelors req'd in 
Computers, Engineering or 
related field of study +2 yrs of 
related exp. 40 hrs/wk. Must 
have legal authority to work 
permanently in the U.S. Con- 
tact HR Manager, Regency 
Technologies, Inc. 1100 
Airport Freeway, Suite 204, 
Bedford, TX 76021 


Developer sought by oncology/ 
therapeutics div. of pharma R&D 
co. in San Francisco, CA 
Candidate must have a 
Bacheior's degree or equiv. in 
Computer Engineering or relat 
ed. Min. of 5 years experience in 
application development & data- 
base design & development on 
Oracle platform required 
Extensive exp. in OOAD, Object 
Oriented Programming, DBA 
database design tools, data 
modeling tools (ERWin), SQL 
PL/SQL, Unix (sheliscripts, FTP. 
automation), Java, Oracle 8i 
database, Oracle 11i applica- 
tions (order fulfillment), Blue 
Martini CRM and HTML, phar- 
ma. pricing s/w customization 
required Experience in phar 
ma. pricing required. Must have 
strong analytical skills in pricing 
infrastructure, information ser- 
vices & data analyses, & excel 
lent oral & written communica 
tion skills. Send resumes to 
OTN, Staffing Dept., 395 Oyster 
Point Blvd., Suite 405, South 
San Francisco, CA 94080, Job 
Code: VM-764 or fax resume to 
(650) 737-9576 


Internet Commercial Artist will 
design arts/visual graphics for 
product ads in Internet shopping 
sites with following duties: re- 
search on products/services and 
formulate concept art design. 
layout using freehand drawing 
and scratch layout; create 
sketches for clients review using 
PhotoShop, EasyPhoto, Print- 
Shop, Photolmpact and Corel- 
Draw7; design animation graph- 
ics with FlashS and WGT; pre 
pare digitized drawings/pictures 
and complete final layout for 
Internet display utilizing HTML 
JavaScript, Namo WebEditor5. 
consult with corporate clients to 
provide artistic suggestions. Re- 
quires BA/BS in Fine Arts 
Studio Arts, or Graphic Design 
ing and must be able to perform 
all the job tasks on the day of hir- 
ing. Full time/competitive salary. 
Resume to: HR, Computer 
Concepts, Inc. 11654 Dorsett 
Rd., St. Louis, MO 63043. No 
call/EOE 


SYSTEMS ANALYST to pro- 
vide on-site consultancy to 
analyze, design, develop, im- 
plement and modify e-com- 
merce applications using Java 
Java Serviets, J2EE, DHTML 
HTML, VC++, C/C++, VB- 
Script, XML, HTTP, TCP/IP, 
JSP, EJB, ASP, Oracle, Sy- 
base, SQL Server and related 
tools in Unix, Windows and 
Real-time NT environment 
Require: B.S. in Computer 
Science/Engineering and two 
years experience in the job 
offered. 25% paid travel re- 
quired to client sites within the 
United States. Competitive 
salary and benefits. Apply with 
resume to: Vice President 
Compucom Global Solutions 
Inc., 200 Perrine Road, Suite 
225, Old Bridge, NJ 08857 


Seeking qualified applicants for the 
following positions in Memphis. 
Collierville, TN: Senior Programmer 
Analyst, Formulate/define function 
al requirements and documentation 
based on accepted user criteria 
Requirements: Bachelor's degree* 
in computer science, MIS, informa 
tion technology, engineering or 
related field plus 5 years of experi- 
ence in systems/appiications devel 
opment. Experience with Java 
either C or C++; and development 
of transactional distributed sys- 
tems/applications also required 
“Master's degree in appropriate 
field will offset 2 years of general 
experience. Submit resumes to Sibi 
George, FedEx Corporate 
Services, 1900 Summit Tower 
Bivd., Suite 1400. Orlando, FL 
32810. EOE M/F/D/V. 
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Network Administrator |: Entry- 
level position to install & support 
company LAN, WAN, Internet 
system. Develop company 
graphic & animation website. 
also assist to maintain, plan 
coordinate & implement network 
security measures Req 
Bachelor's in C.S. or any com- 
puter related field. No exp. req 
but must demonstrate ability to 
perform job through course work 
or project involving C, C++ 
graphic & animation program- 
ming. Resume w/ transcripts to: 
Pres., Color Imaging Inc., 4350 
Peachtree Industrial Bivd., Ste 
100, Norcross, GA 30071 


Computer Programmer: Deve- 
lop, design, analyze & test J2EE 
applications using JSP, Serviets 
JDBC, Oracle, PL/SQL, HTML 
Java Script & Weblogic 
Application Server. Develop 
software applications using 
Signed applets & RMI. Req 
Bachelor's or its foreign dgr 
Equvi't in C.S. or other related 
engineering field + 2yr exp. in 
either job offered or Software 
Engineering or computer pro- 
gramming Resume to 
President Softech Int'l 
Resources, Inc., 3300 Holcomb 
Bridge Rd., Ste 270, Norcross, 
GA 30092 


ENGINEERING 


Leading energy services provider 
seeks Systems Integration Engin- 
eer. BS or equiv in CS, Electronics 
Engrng, Instrumentation Engrng or 
related. Must have 5 yrs exp design 
of control systems that includes 3 
yrs exp middie ware, enterprise 
resource planning or database 
management; 1 yr design, specifi- 
cation and application of energy 
mgmt contro! systems with sw pro- 
tocols; 6 mos exp systems integra- 
tion, web based data acquisition 
and programming of BMS integra- 
tion protocols; knowledge C++ 
Java, SQL/Oracle database. Job 
location: White Plains, NY. Fax 
resume wicover to attn: HR Dept- 
EIS at (914) 448-0057 


Network Administrator. Trouble- 
shoot services, connections, in- 
Stallations; roll out & monitor pro- 
duction systems; maintain utilities 
wiclient applications; database 
admin.; maintain security of sys- 
tems/data; share responsibility w/ 
administrators for 24/7 operating 
systems, network connectivity, 
system services (citrix servers 
etc.). Must have Bachelor's in 
Comp. Sci., Engg. or related, 1 yr. 
exp., & knowledge of SQL data- 
base admin.; NT/2000 systems 
admin.; network mgmt., Citrix; 
IS; Firewalls; Security. Send 
resume to Steve Alderfer, HRSoft, 
LLC, 505 N. 4th St., Fairfield IA 
52556 


Computers - Sr. Technical 
Consultants needed. Seek- 
ing qual. candidates poss- 
essing MS or equiv. and/or 
relevant work exp. Part of the 
req. relevant work exp. must 
include 2 yrs. working with 
Rational Rose, C++ & Open 
Market Transact. Experience 
with WebSphere preferred 
Mail resume & ref. to: Object: 
Solutions, Inc., Attn: HR, 
3025 Harbor Lane, #312, 
Plymouth, MN, 55447-5119 
Please refer to “STC” in your 
reply. 


Programmers, Jr. Programmers. 
Software Engineers: Analyze, 
design and develop apps. in (a) 
MQ Series, Shell Scripts, Java 
and related tech., Oracle & relat- 
ed tools, SQL Loader, CGi/Peri, 
Visual Basic, AppWorx and 
related technologies; (b) C/C++ 
Cobol, PB, Sybase, Java 
Oracle, SQL Server, XML, Unix. 
MQ Series, Weblogic and relat- 
ed technologies. US Workers 
only. Consulting positions requir- 
ing travel. Prevailing wage/ben- 
efits. Send resume to HR, 
Datum America Ltd., 850 Boyce 
Rd., Suite 7, Bridgeville, PA 
15017. EOE 


Looking for 
a new career? 
The new itcareers.com 
and CareerJournal.com 


combined jobs database 


can help you find one. 


Check us out at: 
www.itcareers.com 
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Systems Analyst. Job location 
Indianapolis, IN. Duties: Assist in 
design, develop. & implem. of 
Windows applis. using Visual 
Basic, C++, SQL Server, Java & 
Oracle. Perform VB _ software 
maint. Test & troubleshoot new 
appls. Perform prob. resolution & 
gen. maint. of Windows appis & 
databases. Requires: B.S. in 
Comp. Sci., Eng. or a related field 
& 6 mths. exp. in the job offered 
or 6 mths. exp. as a Prog/Analyst 
or Prog. Concurrent exp. must 
incl. 6 mths. exp. using Visual 
Basic. Send resume (no calls) to 
Lisa Tully, CTG, Inc., 5875 Castle 
Creek Pkwy., Suite 208, Indian- 
apolis, IN 46250-4328. 


Sr. Software Engineer - Design 
deveiop/qualify/tesVsupport large 
scale client-server prod. in Win- 
dows NT/2000, translate designs 
to software prod. using Windows 
NT/2000, Borland Delphi 
SQL/Paradox/Word/Excel/Acces 
s/XML/COM/DCOM. Bachelor's 
degree Computer Sc., Engineerg 
or related field + 2 yrs exp. in 
position, as Software Developer 
or as Software Eng. req'd. Must 
be proficient in Windows NT/2000 
Delphi/MS SQL/COM/DCOM 
Competitive salary, 40 hrs/wk, OT 
as need. Send resume to: D 
Root, HR Director, Alogent, 4005 
Windward Plaza, Alpharetta, GA 
30005 Ref: KS 


it|careers.com 


Hill-Rom Services. Inc 
Batesville, IN. seeks an 
Advanced Electrical Engineer, 
Biomedical Product Develop- 
ment. Must have Master's 
degree or equivalent in 
Biomedical Engineering or 
related field. Must have 2 
years in the position offered or 
2 years as a Program/Product 
Developer. Forward resumes 
to Mr. Jeff Lockwood, Hill- 
Rom Services, Inc., 1069 
State Road 46 E, Batesville 
IN 47006 


VEGA, a NJ based con- 
sulting company, is cur- 
rently staffing for long term 
stimulating projects 
throughout the USA. We 
are hiring professionals 
with any of the following 
skills: AS/400, Cobol/DB2 
VB, C++, Java/HTML 
PowerBuilder, Siebel, SQL 
Server DBA Submit 
resume 


emarcus@vegaconsulting.com 


HAVE A VARIETY OF 


IT JOB OPENINGS? 


POST THEM IN OUR 


JOBS DATABASE 


OW POWERED 


BY 


EV 3a 8 OO EVR @ ON! 


BECOME:A 


CORPORATE MEMBER AND 


POST YOUR UNLIMITED JOBS 


CHECK Us OQuT 


www.itca 


CWO030623N.4 


we 


reers.com 


PROGRAMMER ANALYST to 
analyze, configure, and design 
computer programs utilizing Co- 
bol, SQL, Java, XML, and utility 
customer infc tic nd billing 
ates new business 

es sirements. Re- 

solve technical issues as well as 
lement systems 


Bachelor 


Science 
Math, Phy 


d field plus 


offered 


to: SPL WorldGroug 
Hawthorne P| 
San Francis 


SENIOR SOFTWARE ENGINEER 
lead a team in the design, devel 
opment, implementation and main. 
tenance f complex web_based 
e_commerce and enterprise appli- 
Cation integration applications soft- 
ware in a client/server environment 
using Object oriented technolo- 
gies, MQSeries, MQS!I (WMQI) 
MQAO, Web Methods, J2EE, C++ 
Java, CORBA, Orbix, Oracle, and 
TCP/IP under SUN Solaris, UNIX 
Linux nd Windows NT/2000 
operating systems; supervise and 
mentor junior programmers and 
engineers.. Require: M.S. degree 
in Computer S ce, an Engin- 
eering discipline, or a closely relat- 
ed field, with two years of experi- 
ence in the job offered. Extensive 
travel on assignment to various 
client sites within the U.S. is 
required. Competitive Salary Of- 
fered, 8:00 am to 5:00 pm, M-F 
Send resume to: Vishy Dasari 
President, Objectnet Technologies. 
Inc., 1117 Perimeter Center West 
Suite E104, Atlanta, GA 30338 
Attn: Job KA 


SENIOR SOFTWARE ENGIN 
EER to design elop, test, im- 
plement, mainta support n- 
tier application software using 
Java, Visual Basic, Oracle, Web- 
logic, Onbase, Kudos Application 
Server, RightFax, J2EE, JSP, 
Business Objects and DB2 under 
SUN Solaris operating system 
Mentor junior programmers and 
engineers. Require: Bachelor's 
degree in Computer Science, an 
Engineering discipline, or a close 
ly related field with 5 yrs pro- 
gressively resp dle exp. in the 
job offe as Programmer, 
Systems Analyst. Extensive travel! 
on assignment to various client 
sites within the U.S. is required 
Competitive salary offered. Apply 
by resume to: Ravi Kandimalia 
President 

Inc., 900 

Pkwy., Ste 

30076; Attn 


JUNIOR SYSTEMS AN- 
ALYST: Design & imple- 
ment new _ information 
systems. B.A. Comp 
Science/Math or equiv. & 
2 years experience w/ 
Progress software. Must 
be proficient in PRO- 
GRESS 9.1B. Apply to: 
Transplatinum, Attn: 
Karen Freeman, 5042 
Linbar Dr., Ste. 100, 
Nashville, TN 37211. 


alee b Moles sd 


Business Process Analyst. Work 
Sched 9:00AM-6:00PM 40 hrs. 
wk. $76,980.00 P/A. Evaluate. 
analyze, develop, install, main- 
tain & support client server data- 
bases using Sybase, Oracle 

UDB (Universal Database), MS 

SQL server & Net gateway in 

corporate facilities (vehicle assy 

plants & component mfg plants) 
in NA (U.S., Canada & Mexico 

Evaluate, define software testing 

methods, redesign infrastruc’ 

& process, & analyze sys' 
Unix-based systems 
CT-Libraries Cc 

ect oriented metho 
Use multipl 


development oC ncluding 


Power Builder, C/C++, Sybase & 
UDB database management 
system. Work in technical e 
ronment including 1BM RS6000 
Unix. Master (or equivalent), Any 
Computer Science or Math Dis 
cipline. 1 
Related Occupation of Systems 
Analyst. 1 yr. of Related Occupa- 
tion exp. must include analysis 
installation & mairitenance of 
client server databases using 
Sybase, Oracle, UDB server & 
Net gateway in vehicle assy &/or 
component mfg plants in NA 
which may be concurrent with 
Related Occupation exp. Em- 
ployer Paid Ad. Send resume to 
MDCD, PO Box 11170, Detroit, 
MI 48202, Ref.#210991 


Year exp. in Job or 


Full-time Programmer Analyst 
Responsible for performing analy 
sis, requirement definition, desigr 
coding, testing & implementation of 
Promising Related” Oracle App! 
cations and systems using Oracle 
Designer/Developer and Oracle 
Applications 11i. Support custom 
developed complex ap; ations & 
develop future functio 
tomer code pertaining to 
Application evelop, support, con- 
figure & implement softwar 
tions using analysis and 
including systems integra- 
tion. Work with projeci manage- 
ment, SQL and Report Writes, Unix 
and MQSi. impiement, configure & 
support Oracle ERP applications 
Nncluding OMS, APS(GATP/SCP) 
PL/SQL, C, PERL, MQSeries and 
XML. Consult with managerial and 
technical professionals to clarify 
goals and intent, identify problems 
suggest changes and determine 
extent of analysis required. Must 
have a Bachelors Degree in Com. 
puter Science or related field 
Foreign degree equivalent accept 
ed. Educational or 
ground must have 
-referenc Salary 
resume tc 
Lee, UPS SCS 
Morris Rd, Alpharetta, GA 
Employer will not sponsor v 


this position 


Programmer Analyst Unix 
Administrator for global technolo- 
gy center in Braintree, MA for inter- 


national hospitality company 


Prog Anai Requires: U.S. Bach- 
elor's Degree or equivalent com 
nation of education, tra’ 
experience in Com 

or Computer Engineering an 
years of experience in the follow- 
ing: Software Engineer or Com- 
puter Systems Analyst role, Java- 
script, VB Script, PL/SQL program: 
ming languages, Oracie Portal 
Oracle database (7.x or higher) 
Oracle 9Yias Application Server. 
Solaris OS, and testing and debug 
ging programs. 


Unix Admin Requires: Sun Cert- 
ified System Administrator and 
MCSE, U.S. Bachelor's Degree or 
equivalent combination of educa- 
tion, training and experience in 
Computer Science or Computer 
Engineering and two years of 
experience in the following: Sys- 
tems Administrator or Programmer 
Analyst role, HTML and PL/SQL 
programming languages, Sun 
Solaris OS, Unix, Windows NT 
Admin, Oracle database (7.x or 
higher) 


Submit resume to: braintree 
jobopenings@starwoodhotels.com 
No phone calls please EOE 
M/F/V/D. 
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Principal Software Engineer 
Apply leadership and software 
development skills involving 
Java, user interfaces, data ware 
house deveic and IP 
based networking knowledge 
tand-al ie 

applic ind multi-tiered serv 
er-side technc > Perform 
oding and me 
opers. Use knowle 
scale distributed 
frameworks as they 
scaie and 2 

velop and des 
ork with 
gineerin 
TO t 


catior 


software 
mplement 
dased 1e satisfy 
functior 


establish standard 


ai obje: 


software and systerr 
ment within the 
Requirements ir 
Jegree or equiva’ 
ence or sely 

related field and three years of 
pre- or post-dec rk exper 
ence in the job offered or related 
field of software development 
ising Java 
have 
to work 
Salary 

rs/wk 


Office, 19 Stanifor 
Boston, MA 02114 


Americar 

gy Corp has several 
Programmer Ana 
AnalysvSoftware E 
tem Admn, Databe 
trator with 
experience 


ing skills 


Database Admn 

Oracle, Sybase, MS 

DB2 

Systems Admn: UNIX (SUN 
HP-UX, AIX), Windows NT, MVS 
Programmer Analysts/Sys- 
tems Analysts/Software Engin- 
eers: VB, PB. AS/4 3 
Synon, JDEdwards 

Java, J2EE, HTML 

commerce, C 

notes, CORBA 

Gentran, CGI 

Oracle 

Erwin, 


soft 


ome posi 
ors D 
Degree 
experience 


é apply 
HR Dept 


3204, Long Prairie Road, Suite 


ng. Mail resume 


E, Flower Mound, Texas 22 


Programmer/Analyst Analyze 
design, develop, test, implement 
and maintain B2B & B2C 
tomize arprise apo 
EJB ava, J2EE, HTML 
related Internet enterprise 
architectures and technologies 
May be used on multi-tier systerns 
related to internet/IntranevE Com 
merce. Must have BS or equivalent 
in CS/Maih/Engineering, Informa 
tion Systems or related. Must 
have 2 years exp. in job offered or 
in Enterprise applications develop- 
ment. Such experience must 
include Java and EJB. Must be 
willing to be assigned to unantici 
pated client sites throughout the 
United States. Salary: $80,000/yr 
Hrs. 8:00am-5:00pm 40/wk 
Please send 2 copies of resume 
to: Case No. 200202476, Labor 
Exchange Office, 19 Staniford St 
1st Fl, Boston, MA 02114 


Banking 


MBNA Technology 
f MBNA America 
the world’s 
applications for 


nology Analyst 


Requirements 


YNA033171 


Farmer. MBNA Amer 


assigned ui 

sites throughout the United States 
Salary: $60,000/yr Hrs: 8:00am 
5:00pm, 40/wk. Please send 2 
copies of resume to: Case # 
200202196 Labor Exchange 
Office,19 Staniford St., 1st F 

Boston, MA 0211 
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Continued from page I 


IDS 


existing solutions are not per- 
fect, but they are much better 
than nothing at all.” 

An IDS typically operates 
behind a firewall looking for 
patterns or signals in network 
traffic that might indicate ma- 
licious activity. Over the past 
two years, the sensor-based 
technology has been gaining 
increasing attention from 
users who see it as an added 
layer of protection against at- 
tacks that breach other de- 
fenses, such as firewalls and 
antivirus software. 

However, several problems 
with IDSs make the technolo- 
gy more trouble than it’s 
worth, said Richard Stiennon, 
a Gartner analyst and author 
of the IDS report. 

The biggest is the fact that 
the systems impose a heavy 


Continued from page 1 


N/MCI 


Defense” and possibly in all of 
the federal government. 

“Today, N/MCI is an indus- 
try standard,” said Al Ed- 
monds, president of EDS Gov- 
ernment Solutions. 

But some Navy users, senior 
officials and even EDS busi- 
ness partners raised concerns 
about the N/MCI program’s 
approach to security. 

“N/MCLI is the most secure 
network in DOD? It’s kind of 
hard to judge that,” said Cathy 
Baber, director of information 
assurance at the Naval Net- 
work and Space Operations 
Command, which the Navy 
formed last year to oversee se- 
curity for N/MCI. “There are 
still concerns. There are a lot 
of things that weren’t thought 
about,” she said. 

One such issue is managing 
the certification process for 
connecting N/MCI users to 
the current Defense Informa- 
tion Systems Network (DISN), 
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management burden on com- 
panies by requiring full-time 
monitoring, Stiennon said. 
The tendency of such systems 
to generate a very large num- 
ber of false alarms also adds to 
this burden, he said. The tech- 
nology’s inability to monitor 
traffic at transmission rates 
greater than 600Mbit/sec. can 
also be a problem, especially 
with widely deployed high- 
speed internal networks, ac- 
cording to Stamford, Conn.- 
based Gartner. 

Because of these issues, IDSs 
will become obsolete by 2005, 
Stiennon predicted. Instead of 
spending on technologies that 
detect intrusions, companies 
would be more prudent to in- 
vest in technologies that are 
designed to prevent intrusions 
from occurring in the first 
place, such as “deep-packet- 
inspection” firewalls, he added. 

“T don’t know about obso- 
lete, but IDS is not all the rage 


the Pentagon’s main telecom- 
munications backbone for 
both classified and unclassi- 
fied data. 

Vanessa Hallihan, program 
manager for IS security at the 
Space and Naval Warfare Sys- 
tems Command, manages the 
DISN connection process. 
“We haven’t yet come to grips 
with [N/MCI] as an enterprise 
process,” she said. “The work- 
load is very intense, and I 
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it was two to three years ago, 
that’s for sure,” said Michael 
Engle, vice president of infor- 
mation security at Lehman 
Brothers Holdings Inc. 

When New York-based 
Lehman Brothers installed an 
IDS about three years ago, the 
system generated more than 
600 alerts daily, he said. Since 
then, the firm has invested in 
an event-correlation technolo- 
gy for analyzing IDS data and 
distilling it into a more man- 
ageable volume, Engle said. 

“T think it takes an inordi- 
nate amount of time to get 
meaningful IDS data from 
those systems, hence our in- 
vestment in event-correlation 
software,” he said. 

Engle declined to identify 
the software Lehman is using, 
but vendors of such products 
include NetForensics Inc. in 
Edison, NJ., ArcSight Inc. in 
Sunnyvale, Calif., and Intelli- 
tactics Inc. in Bethesda, Md. 


don’t have the resources.” 

Bart Abbott, director of in- 
formation assurance programs 
at Raytheon Co., a subcontrac- 
tor to EDS on the project, said 
he believes that the N/MCI 
project team has delivered on 
the Navy’s need for a more 
secure network, though he 
acknowledged that there are 
still wrinkles in the N/MCI se- 
curity fabric that need to be 
ironed out. 


A V-22 Osprey hovers above the runway at the Naval Air Station in 
Patuxent River, Md., one of the first units to monitor how well EDS 
meets its service-level agreements under the N/MCI contract. 
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Some problems with IDSs: 
8 False positives and negatives 
@ Increased burden on iT depart- 
ments because of the need for 
full-time monitoring 
@ The taxing incident-response 
process 
® An inability to monitor traffic at 
transmission rates greater than 
600Mbit/sec. 


“We agree with a fair 
amount of the criticism” sur- 
rounding traditional IDSs, said 
Chris Hovis, a vice president 
at IDS vendor Lancope Inc. in 
Alpharetta, Ga. But using such 
issues to dismiss the technolo- 
gy entirely is a mistake, he 
said. 

New correlation, statistical 
and rules-based filtering tech- 
nologies are beginning to help 


For example, EDS has pilot- 
ed the use of public-key infra- 
structure (PKI) technology at 
two user sites and plans to roll 
out PKI for all N/MCI users in 
conjunction with common 
access cards, or smart cards. 
But more work needs to be 
done to make PKI and smart 
cards easier to use, he said. 

Abbott also acknowledged 
performance problems result- 
ing from various security 
mechanisms, such as e-mail 
and Web content filtering at 
the connection points be- 
tween N/MCI and the Defense 
Department’s unclassified net- 
work, which is known as the 
Non-secure Internet Protocol 
Routing Network. In addition, 
users have reported full disk 
scans taking place during the 
log-on process. 

“We've looked at the mobile 
user in particular,” said Ab- 
bott, adding that EDS is trying 
to significantly improve net- 
work performance for remote 
access. It will take EDS and 
the Navy several months to 
improve remote access and 
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companies cut through the 
noise generated by traditional 
IDSs and mine useful informa- 
tion from them, said Martin 
Roesch, chief technology offi- 
cer at Sourcefire Inc., an IDS 
vendor in Columbia, Md. 

“I think the Gartner report 
is shortsighted and ignores 
basic security principles,” 
Roesch said. The notion that 
intrusion-prevention tech- 
nologies can stop all attacks is 
just not realistic, making the 
need for IDS technology ap- 
parent, he added. 

“While the technology has 
been plagued with issues from 
the past, such as high false 
positives, evasion tactics and 
mismanagement, the leading 
vendors in this space have re- 
sponded with products that 
are very powerful in the hands 
of the right security staff,” 
agreed Michael Rasmussen, an 
analyst at Forrester Research 
Inc. in Cambridge, Mass. DB 


make other network security 
adjustments, including the im- 
plementation of an updated 
virus-protection package that 
includes a spam filter. 

Several industry representa- 
tives at the symposium also 
raised concerns about com- 
mercial contractors’ inability 
to communicate with external 
entities, such as their own cor- 
porate offices. 

“It’s a difficult proposition, 
because the corporate envi- 
ronment is an untrusted envi- 
ronment from the Navy’s per- 
spective,” Abbott said. 

Lt. Col. Ken Buetel, director 
of the Marine Corps Informa- 
tion Technology and Network 
Operations Center, said some 
of his supporting vendors 
have raised the same issue. 
Buetel said he has been forced 
to tell them, “We really don’t 
trust the corporate domain.” D 


ALMOST THERE 3 


More than 80% of planned N/MCI seats 
will be active by year's end, officials say 
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Why Bad Ideas Stick 


VER NOTICE how bad ideas just keep coming around? It 
happened again last Tuesday at a U.S. Senate Judiciary 
Committee hearing on online music piracy, where com- 
mittee chairman Orrin Hatch asked antipiracy experts 
about ways to damage the computers of people who ille- 
gally download files. When one vendor of antipiracy technology 
replied, “No one is interested in destroying anyone’s computer,” 


“yr 


Hatch interrupted, 


I’m interested. .. 


. If that’s the only way, then I’m 


all for destroying their machines” (see story, page 10). 
Sound familiar? It should — it’s a hyperventilated version of last 
summer’s “license-to-hack” proposal. 


You remember that one: U.S. Congressman 
Howard Berman from California wanted to let 
copyright owners use something he called 
“technological self-help” instead of legal action 
to stop online piracy. 

Berman’s idea — and it was a truly awful idea 
— targeted the same peer-to-peer networks 
that Hatch’s committee was holding hearings 
about. Under Berman’s plan, a copyright holder 
who suspected someone of infringing on those 
copyrights could actually break into a suspect- 
ed pirate’s computer and plant malicious code 
— and would be protected from liability for any 
damage that was caused. 

Wouldn’t that be handy? No evidence, no ex- 
pensive and time-consuming legal processes 
that might result in a judge or jury deciding 
there was no piracy after all. Instead, all a copy- 
right holder would need was a suspicion — and 
a willingness to sabotage. 

Of course, to make sure peer-to-peer pirates 
didn’t slip through loopholes in a law too nar- 
rowly drawn, a license-to-hack law would have 
to be written as broadly as possible, targeting 
any network suspected of containing copyright- 
infringing material. 

So if, say, a software vendor sus- 
pected your company of having un- 
licensed software on its network — 
whether that suspicion was true or 
not — the vendor could, hypotheti- 
cally, break in and even sabotage 
your computers under Berman’s 
proposal. 

Would that be a legal stretch? 

Maybe. But any vendors that tried it 
could claim that they really did be- 
lieve their copyrights were being 
infringed upon and that the law 
shielded them from having to pay 





for any damages resulting from their sabotage. 

All in all, a very bad idea. Fortunately, not 
long after Berman introduced his bill, it sank 
without a trace. 

Now, a year later, it has resurfaced — in the 
hands of a much more powerful lawmaker. 

Is it still such a bad idea? Well, let’s see: Last 
year, the recording industry succeeded in shut- 
ting down Napster. In the year since, the re- 
cording industry has continued to win most of 
its legal battles. Judges have issued orders. Mu- 
sic pirates have been identified and fined. In 
short, the courts are dealing with the problem. 
The system works just fine. There’s less need 
than ever for a license-to-hack law. 

Meanwhile, the risks of a license-to-hack law 
have gotten a lot less hypothetical. For example, 
if The SCO Group had a license-to-hack law to 
use, it wouldn’t need to bother with proving 
any claims against IBM in court. SCO could 
simply — and legally — launch viruses, worms, 
Trojan horses or other electronic attacks against 
anyone running AIX, Linux or any other soft- 
ware that SCO claimed contained its copyright- 
ed code. And if it eventually turned out that 

SCO’s claims were wrong? AIX and 
Linux users would still have been 
sabotaged — with no recourse. 

It’s probably just a coincidence 
that Orrin Hatch happens to be 
SCO’s senator. But you'd think the 
chairman of the Senate’s commit- 
tee on judges and courts would un- 
derstand why we have judges and 
courts — and why vigilante attacks 
of any kind are a bad idea. 

Too bad we can’t trust our law- 
makers to understand that. And it’s 
too bad those bad ideas will just 
keep coming around. B 
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Doing It by the Book 

HR reports must be shredded - they have confidential 
data, boss tells IT pilot fish. Since most of these re- 
ports are just for reference, why not just save the 
printing and keep them on disk? fish suggests. “No, 
they must be shredded,” boss insists. Well, why don’t 
we hook the shredder to the back of the printer for the 
unnecessary reports? fish jokes. “Sounds great!” says 
boss. “How much will it cost?” 
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Priorities i 

This contractor pilot fish 

spends a lot of his time 

helping the mainframe: 

group get up to speed on system to check whether 
PCs - answering ques- _: it displays the same 
tions and doing spot : characteristics.” 


training. When the group : 
upgrades to anew ver- | The Usual Way 
sion of Windows, aston- : Branch office IT pilot 
ished fish ses 100 man- fish petitions C10 to buy. 
uals, still in shrink wrap, : seven laptop docking 
being trashed. Why : stations with monitors 
weren't they given to the : for traveling staff. Not. 
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told. “We want them to Still no. What about one 
be working!” : docking station with no 
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The competition won't Pete ae 
virus fix in two hours. Then again, ee 
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LOW COST. 
NO COMPROMISE. 


SUN FIRE™ V60X SERVER: 
> INTEL XEON 2.8 GHZ PROCESSOR 
> RUNS SOLARIS™ 9 OS FOR X86 OR RED HAT® ENTERPRISE LINUX’ ES 


$2,450. 


SUN FIRE V210 SERVER: 
> RACK-OPTIMIZED, ULTRASPARC‘/SOLARIS OS 
> INTEGRATED WITH AWARD-WINNING SUN™ ONE MIDDLEWARE 


$2,995. 


SUN STOREDGE™ 3310 SCSI ARRAY: 
> HIGH-DENSITY, MODULAR STORAGE 
> HIGH AVAILABILITY CONFIGURATIONS 


$6,995. 


SUN FIRE B100 BLADE SERVER: 
> ULTRASPARC OR X86 PROCESSOR 
> RUNS SOLARIS 8, 9, OR RED HAT ENTERPRISE LINUX ES* 


$1,795. 


THE LOW COST MOVE IS ON 
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